How to remove “Trojan.Spy.Wsnpoem.EL (B)”?

The Trojan.Spy.Wsnpoem.EL (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.

6-day free trial available.

What Trojan.Spy.Wsnpoem.EL (B) virus can do?

At least one process apparently crashed during execution
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Spy.Wsnpoem.EL (B)?


File Info:
name: C96CB55F3807383462EB.mlw
path: /opt/CAPEv2/storage/binaries/13517c06b11e3f2f46dd3bd9c833ecb1788287d5709f6e6a8d8b3d22d5ca2125
crc32: 92D0BD99
md5: c96cb55f3807383462eb68426ec1b701
sha1: 8fde3d76f065381820d775fb418b8487fb2d0358
sha256: 13517c06b11e3f2f46dd3bd9c833ecb1788287d5709f6e6a8d8b3d22d5ca2125
sha512: a90794cb4ce83506eb3f74ae15a76925ad83b40e5a2866771c7670c982207fa1cfe145db460c4ce2cae0992e24f62fcb5618c2c866d7438d08069a0c40553e36
ssdeep: 1536:oXOsuooQUfmLUUA0uN7sERwr05mxNGaHCz:UU+2ji0YxMSo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B3237D2671D1CCF2DA6144B025EDBB7667BFF8363D289C87C31409886852DD2D52BB8B
sha3_384: b3d8c28de4c7d57651cae4f51f5147d8c417d47884b65bfa977babcc8cf16f00b61546a5533b281cd2bb0191e3f16d9d
ep_bytes: 024100d8030c00cc104000840c410098
timestamp: 2000-06-09 17:33:59

Version Info:
0: [No Data]

Trojan.Spy.Wsnpoem.EL (B) also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Trojan.Spy.Wsnpoem.EL
FireEye	Generic.mg.c96cb55f38073834
McAfee	GenericRXRO-DF!C96CB55F3807
Cylance	Unsafe
BitDefenderTheta	Gen:NN.ZexaF.34742.dqW@aOouAze
Cyren	W32/Zbot.J.gen!Eldorado
TrendMicro-HouseCall	Mal_Pai-5
ClamAV	Win.Malware.Zbot-9951823-0
BitDefender	Trojan.Spy.Wsnpoem.EL
Avast	Sf:Zbot-JD [Trj]
Ad-Aware	Trojan.Spy.Wsnpoem.EL
Emsisoft	Trojan.Spy.Wsnpoem.EL (B)
Comodo	TrojWare.Win32.Spy.Zbot.ABA@1pe611
TrendMicro	Mal_Pai-5
McAfee-GW-Edition	BehavesLike.Win32.Generic.ph
Trapmine	suspicious.low.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Trojan.Spy.Wsnpoem.EL
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=89)
Cynet	Malicious (score: 100)
ALYac	Trojan.Spy.Wsnpoem.EL
Malwarebytes	Malware.Heuristic.1003
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:Zss/3SZRISOORINRZJzpmA)
Ikarus	Trojan-Spy.Win32.Zbot
Fortinet	W32/Wsnpoem.EL!tr
AVG	Sf:Zbot-JD [Trj]
Cybereason	malicious.f38073

How to remove Trojan.Spy.Wsnpoem.EL (B)?

Trojan.Spy.Wsnpoem.EL (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X