Trojan.SpynoonFC.S28986166 removal instruction

The Trojan.SpynoonFC.S28986166 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.SpynoonFC.S28986166 virus can do?

Authenticode signature is invalid
CAPE detected the DCRat malware family

How to determine Trojan.SpynoonFC.S28986166?


File Info:
name: 6C0B29159FFD63FD56DE.mlw
path: /opt/CAPEv2/storage/binaries/367f97106e9d10160f7c01facfac9dd588d6ad6bc820c2f5e2c6a02eb179821b
crc32: F7953618
md5: 6c0b29159ffd63fd56defba8a605857b
sha1: 76bf5c07da1127cb64db7a9a2c9353bba8ea1e60
sha256: 367f97106e9d10160f7c01facfac9dd588d6ad6bc820c2f5e2c6a02eb179821b
sha512: f68f30dc4b1dd456a516072a06474ad0ad579565d53dfbc6e9bdbc7f7cae5b018564c7e75d85c139e85fb7d4d5010a1f358feb22b1592d317d75ea5c69795428
ssdeep: 12288:SANE5nsfSrMTBIP9y15SVBy23jPlK1tA1Aj2WEvIwTWU4RkFZ3Tx:SANLVqP9YUyb1ZhOIwTRj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EFE495342EEE1129F177AF7DCAE57596DA6EB6A33707994D00A102CA0723B41DDC063B
sha3_384: f26251659fd833832a254547ee32c787db9a2284892df57ca9a181246aba9e6589c48d9e9a963bea274cc6a8e89591c5
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-07-24 15:13:08

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 1.1.1o
InternalName: libcrypto
OriginalFilename: libcrypto
ProductName: 
ProductVersion: 1.1.1o
LegalCopyright: Copyright 1998-2022 The OpenSSL Authors. All rights reserved.
Translation: 0x0409 0x04b0

Trojan.SpynoonFC.S28986166 also known as:

Bkav	W32.AIDetectMalware.CS
AVG	Win32:DropperX-gen [Drp]
Elastic	malicious (high confidence)
DrWeb	BackDoor.DarkCrystalNET.18
MicroWorld-eScan	Trojan.MSIL.Basic.8.Gen
FireEye	Generic.mg.6c0b29159ffd63fd
CAT-QuickHeal	Trojan.SpynoonFC.S28986166
Skyhigh	BehavesLike.Win32.Generic.jm
McAfee	DCRAT-FDQN!6C0B29159FFD
Malwarebytes	Generic.Malware.Agent.DDS
Zillya	Trojan.BasicGen.Win32.1
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00592ff21 )
Alibaba	Backdoor:MSIL/DCRAT.4f6439b0
K7GW	Spyware ( 00596bfb1 )
BitDefenderTheta	Gen:NN.ZemsilF.36804.Om0@aS6nNGai
VirIT	Trojan.Win32.Genus.LVV
Paloalto	generic.ml
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Spy.Agent.DTR
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
ClamAV	Win.Packed.Msilmamut-9987799-0
Kaspersky	HEUR:Backdoor.MSIL.DCRat.gen
BitDefender	Trojan.MSIL.Basic.8.Gen
Tencent	Backdoor.MSIL.DCRat.ha
Emsisoft	Trojan.MSIL.Basic.8.Gen (B)
F-Secure	Heuristic.HEUR/AGEN.1371403
VIPRE	Trojan.MSIL.Basic.8.Gen
Trapmine	suspicious.low.ml.score
Sophos	Troj/DCRat-J
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.MSIL.ftrw
Varist	W32/MSIL_Kryptik.HUS.gen!Eldorado
Avira	HEUR/AGEN.1371403
MAX	malware (ai score=81)
Antiy-AVL	Trojan[Backdoor]/MSIL.DCRat
Kingsoft	malware.kb.c.997
Microsoft	Backdoor:MSIL/DCRat!pz
Arcabit	Trojan.MSIL.Basic.8.Gen
ZoneAlarm	HEUR:Backdoor.MSIL.DCRat.gen
GData	MSIL.Trojan.PSE.1OW8TZJ
Google	Detected
AhnLab-V3	Backdoor/Win.DCRAT.R507253
Acronis	suspicious
VBA32	Dropper.MSIL.gen
ALYac	Trojan.MSIL.Basic.8.Gen
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Backdoor.DCRat!1.E0D3 (CLASSIC)
Ikarus	Trojan.MSIL.Spy
Fortinet	MSIL/Agent.DTR!tr.spy
DeepInstinct	MALICIOUS

How to remove Trojan.SpynoonFC.S28986166?

Trojan.SpynoonFC.S28986166 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X