Trojan-Spy.Win32.Xegumumune.fii removal guide

Malware Removal

The Trojan-Spy.Win32.Xegumumune.fii is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Trojan-Spy.Win32.Xegumumune.fii virus can do?

  • Attempts to connect to a dead IP:Port (4 unique times)
  • A process attempted to delay the analysis task.
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

fousteri.giize.com
houstedm.kozow.com
houstrikqs.freeddns.org
hojkstril.loseyourip.com

How to determine Trojan-Spy.Win32.Xegumumune.fii?


File Info:

crc32: 40FCC210
md5: 5e913116a136e05f68a8409ed890af8a
name: 5E913116A136E05F68A8409ED890AF8A.mlw
sha1: 7aec94ff9cc5a62a125ac4d49af4387771da9010
sha256: 90c1406d6c0f3c8c00670ea9d46836e96e942716648e4909961ae5e58876b4d9
sha512: f619e6a4344b54e89e0abdb3fefac446ec9466be4f370ce81bdfa48c2ca8528a5b83cd1f95185c343da49a5924af0b4a588a3fccb52a29cfbdaf827cdad95ac4
ssdeep: 3072:7IH7fsq2hSuVSG/0MHHTXVVwRwkNAMd29SYMtUMqqDBPTPMFX:7Ibfs3ouVSG/0MHHTlVwyiWSzt3qqDB
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Trojan-Spy.Win32.Xegumumune.fii also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.684266
McAfeePWS-FCRP!5E913116A136
CylanceUnsafe
K7AntiVirusTrojan ( 005485311 )
BitDefenderGen:Variant.Razy.684266
K7GWTrojan ( 005485311 )
Cybereasonmalicious.6a136e
TrendMicroTROJ_GEN.R06EC0PKG20
BitDefenderThetaAI:Packer.64EFC4A51E
SymantecInfostealer
APEXMalicious
AvastWin32:RATX-gen [Trj]
ClamAVWin.Dropper.NetWire-8025706-0
KasperskyTrojan-Spy.Win32.Xegumumune.fii
Ad-AwareGen:Variant.Razy.684266
SophosMal/Generic-S
F-SecureTrojan.TR/Spy.Gen
DrWebTrojan.DownLoader35.26123
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
FireEyeGeneric.mg.5e913116a136e05f
EmsisoftGen:Variant.Razy.684266 (B)
IkarusTrojan-Spy.Agent
AviraTR/Spy.Gen
MicrosoftTrojan:Win32/CryptInject!ml
ArcabitTrojan.Razy.DA70EA
ZoneAlarmTrojan-Spy.Win32.Xegumumune.fii
GDataWin32.Trojan.Netwire.C
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_NetWiredRC.R354062
VBA32BScope.Backdoor.NetWiredRC
MAXmalware (ai score=83)
MalwarebytesTrojan.AutoRun
ESET-NOD32a variant of Win32/Spy.Weecnaw.P
TrendMicro-HouseCallTROJ_GEN.R06EC0PKG20
RisingBackdoor.NetWire!1.C98D (CLASSIC)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_88%
FortinetW32/Weecnaw.P!tr.pws
AVGWin32:RATX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (D)
MaxSecureTrojan.Malware.74190274.susgen

How to remove Trojan-Spy.Win32.Xegumumune.fii?

Trojan-Spy.Win32.Xegumumune.fii removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment