Spy Trojan

Should I remove “Trojan-Spy.Win32.Stealer.smc”?

Malware Removal

The Trojan-Spy.Win32.Stealer.smc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Stealer.smc virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • Unconventionial language used in binary resources: Hindi
  • The binary likely contains encrypted or compressed data.
  • A scripting utility was executed
  • Attempts to stop active services
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Spy.Win32.Stealer.smc?


File Info:

crc32: 18A832AA
md5: 81cfec6381285880f87b66578a95c57b
name: 81CFEC6381285880F87B66578A95C57B.mlw
sha1: a21e1663bcac2e671bd90d9a6f7ca86f80e80c43
sha256: 2912df6672a37d9e21fd91c7f0eaf780bcc2fea7adacebeefd99eb54ea9f0343
sha512: d5de86e644922165f7f44592dec776c944351cfc780eaaebce9ed5928b5f62d6ca8e67e14ebb662eff88987d7876f9acaae671f77f8f17fbb8ff19b939ce67f6
ssdeep: 6144:22CkKBoE5M3hlnyZN1eDV6mEvHYSggRJj6ZsUrHQr2XVm:22BE5M3PyD1FmEvHDruZ1HjXV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Spy.Win32.Stealer.smc also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0056559b1 )
LionicTrojan.Win32.Stealer.l!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.31672
ClamAVWin.Malware.Generic-7688662-0
ALYacTrojan.GenericKDZ.66734
MalwarebytesTrojan.MalPack.GS
ZillyaTrojan.Kryptik.Win32.2023305
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.GenericKDZ.66734
K7GWTrojan ( 0056559b1 )
Cybereasonmalicious.381285
CyrenW32/Agent.BTA.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HCXI
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.Stealer.smc
AlibabaRansom:Win32/generic.ali2000010
NANO-AntivirusTrojan.Win32.Encoder.hjnpaf
MicroWorld-eScanTrojan.GenericKDZ.66734
TencentWin32.Trojan-spy.Stealer.Eann
Ad-AwareTrojan.GenericKDZ.66734
SophosMal/Generic-S
ComodoMalware@#2eejp0qfog049
BitDefenderThetaGen:NN.ZexaF.34236.vqW@aqIDf@iG
VIPRETrojan.Win32.Generic!BT
FireEyeGeneric.mg.81cfec6381285880
EmsisoftTrojan.GenericKDZ.66734 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.Agent.tlspy
eGambitUnsafe.AI_Score_93%
Antiy-AVLTrojan/Generic.ASMalwS.30571B3
ArcabitTrojan.Generic.D104AE
SUPERAntiSpywareRansom.GandCrab/Variant
GDataTrojan.GenericKDZ.66734
AhnLab-V3Trojan/Win.MalPe.X2062
Acronissuspicious
VBA32Trojan.Glupteba
MAXmalware (ai score=100)
RisingMalware.Obscure/Heur!1.9E03 (CLASSIC)
YandexTrojan.Kryptik!/KmZwVnN6EU
IkarusTrojan-Dropper.Win32.Danabot
MaxSecureTrojan.Malware.92806654.susgen
FortinetW32/CoinMiner.HPDF!tr
PandaTrj/Genetic.gen

How to remove Trojan-Spy.Win32.Stealer.smc?

Trojan-Spy.Win32.Stealer.smc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment