Trojan.Win32.Mansabo.dso information

The Trojan.Win32.Mansabo.dso is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Mansabo.dso virus can do?

Executable code extraction
Creates RWX memory
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Creates a copy of itself

How to determine Trojan.Win32.Mansabo.dso?


File Info:
crc32: 71A6E469
md5: 08e81466bd48ef5292210fc00b4dd128
name: lastimg.png
sha1: 2c3d77d6f5cf6e76b33b162b03c1f5485ce2b315
sha256: c12e4a5df05f1448da03da3514b15950e003ba75af8f258e8d7e00b9ca923b20
sha512: 0e4f70cc971128ae7dccfc45e8073c3ece21f444d7c41f25fb66d06f3221ef590cd631f01e0ec709917e7d7586c0081dd479766949ceb69dee867246eeee7cee
ssdeep: 12288:6/Krvw0dDEW3Ngj3w+uCzd+e4SvNkoixNB+yQIwQuYo5k:8KbDoj3w+uooRxNB50Qx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1998
InternalName: CalUser
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: CalUser Application
ProductVersion: 1, 0, 0, 1
FileDescription: CalUser MFC Application
OriginalFilename: CalUser.EXE
Translation: 0x0409 0x04b0

Trojan.Win32.Mansabo.dso also known as:

MicroWorld-eScan	Trojan.Agent.EJCV
FireEye	Trojan.Agent.EJCV
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Trojan.Agent.EJCV
K7GW	Trojan ( 0055d5e61 )
APEX	Malicious
Kaspersky	Trojan.Win32.Mansabo.dso
Rising	Malware.Obscure/Heur!1.A89E (CLASSIC)
Ad-Aware	Trojan.Agent.EJCV
F-Secure	Trojan.TR/AD.TrickBot.kmzcs
Trapmine	suspicious.low.ml.score
Emsisoft	Trojan.Agent.EJCV (B)
GData	Trojan.Agent.EJCV
Jiangmin	Trojan.Mansabo.ark
Webroot	W32.Trojan.Emotet
Avira	TR/AD.TrickBot.kmzcs
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Agent.EJCV
ZoneAlarm	Trojan.Win32.Mansabo.dso
TACHYON	Trojan/W32.Mansabo.770229
AhnLab-V3	Trojan/Win32.Trickbot.C3641780
BitDefenderTheta	Gen:NN.ZexaE.33550.Vy1@ayHzv2mi
ALYac	Trojan.Agent.EJCV
MAX	malware (ai score=80)
ESET-NOD32	a variant of Win32/Kryptik.GZLR
Fortinet	W32/Kryptik.GZLR!tr
Qihoo-360	HEUR/QVM07.1.E5FD.Malware.Gen

How to remove Trojan.Win32.Mansabo.dso?

Trojan.Win32.Mansabo.dso removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X