About “Trojan.Win32.Eb.bow” infection

The Trojan.Win32.Eb.bow is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Eb.bow virus can do?

• Executable code extraction
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• A process attempted to delay the analysis task.
• Expresses interest in specific running processes
• Unconventionial language used in binary resources: Serbian
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Checks the CPU name from registry, possibly for anti-virtualization
• Collects information to fingerprint the system
• Anomalous binary characteristics

How to determine Trojan.Win32.Eb.bow?

File Info:
crc32: 26284194
md5: f0c790b30452db261d895e34fd46ffae
name: F0C790B30452DB261D895E34FD46FFAE.mlw
sha1: 638300975ad682d521e436c31ae268a210fff85c
sha256: 6752df01b87cd39459807b07886761a0ba64b98937322c5f76f07583a05fcbb1
sha512: b3800150e7fb4cbce8d0329a3bb421fff1b544a23021444cb5cb518815f4aff34537a7d65e6283eb44ad674957245f48c35562c417c1adc89deb9ba99ebab92a
ssdeep: 98304:0PbvmM+Z6v0zVF33GjeNsk7CsR+HWdwCbT5sdguF+te2BSrBLkqe6N8xHvV+/se:ybvmMkESu/2B8bQHvELmtFx3SWcka/
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
InternalName: triwilbifor.occ
FileVersion: 6.26.341
Copyright: Copyrighz (C) 2020, wodkagude
ProductVersion: 1.13.21
TranslationUsa: 0x0173 0x00e1

Trojan.Win32.Eb.bow also known as:

How to remove Trojan.Win32.Eb.bow?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.