Trojan.Win32.Mansabo.evh removal guide

The Trojan.Win32.Mansabo.evh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Mansabo.evh virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Malayalam
Anomalous binary characteristics

How to determine Trojan.Win32.Mansabo.evh?


File Info:
crc32: 7E133BD1
md5: e9e4ecee887493fd3436a993e539be42
name: E9E4ECEE887493FD3436A993E539BE42.mlw
sha1: c9dcdbc479b43d0ce778f6577686c958fa3f910e
sha256: 65db698db9ad8bba20f625302a9f2f170e0546d15fbcf11666b375ee63eff415
sha512: daca9bd65134f84deffd3b5138170ef031b884b42d237ae405f8be50b852b82dd1add325effb1a69b63b4d9197b2a3891b7a007238525fe721470e739c150beb
ssdeep: 6144:vDhqe0E073w+k286wm9bux+RpDtDtFl6RL72FNzny75rawv:v9v0E073w+m6wqwyphTlSiNzy75rhv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Paul Bahlawan April 2003
InternalName: Hexsweeper
FileVersion: 1.00.0023
CompanyName: Minesweeper Inc.
ProductName: HexSweeper
ProductVersion: 1.00.0023
FileDescription:  Minesweeper with its hexagonal tiles. Uses a subrutine recursively to clear out open areas and transperant BitBlt to draw the tiles
OriginalFilename: Hexsweeper.exe

Trojan.Win32.Mansabo.evh also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.67272
FireEye	Generic.mg.e9e4ecee887493fd
ALYac	Trojan.GenericKDZ.67272
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 005677851 )
BitDefender	Trojan.GenericKDZ.67272
K7GW	Trojan ( 005669b91 )
BitDefenderTheta	Gen:NN.ZevbaF.34634.Bm1@aO@r2HbO
Cyren	W32/Trickbot.DY.gen!Eldorado
Symantec	Trojan.Trickybot!g12
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	Trojan.Win32.Mansabo.evh
NANO-Antivirus	Trojan.Win32.TrickBot.hkykgp
Tencent	Malware.Win32.Gencirc.10cdcb3b
Ad-Aware	Trojan.GenericKDZ.67272
Emsisoft	Trojan.GenericKDZ.67272 (B)
Comodo	TrojWare.Win32.TrickBot.ADF@8s4jlf
F-Secure	Heuristic.HEUR/AGEN.1134711
DrWeb	Trojan.DownLoader33.43199
Zillya	Trojan.Mansabo.Win32.1790
Invincea	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Ikarus	Trojan.Win32.Injector
Jiangmin	Trojan.Mansabo.bmu
MaxSecure	Trojan.Malware.101639626.susgen
Avira	HEUR/AGEN.1134711
Antiy-AVL	Trojan/Win32.Mansabo
Microsoft	Trojan:Win32/Trickbot.DHN!MTB
Arcabit	Trojan.Generic.D106C8
SUPERAntiSpyware	Trojan.Agent/Gen-TrickBot
AhnLab-V3	Trojan/Win32.Trickbot.C4103580
ZoneAlarm	Trojan.Win32.Mansabo.evh
GData	Trojan.GenericKDZ.67272
Cynet	Malicious (score: 100)
ESET-NOD32	a variant of Win32/Injector.EMID
McAfee	Trickbot-FSNZ!E9E4ECEE8874
MAX	malware (ai score=87)
VBA32	TScope.Trojan.VB
Malwarebytes	Trojan.Agent
Panda	Trj/GdSda.A
Zoner	Trojan.Win32.91375
Rising	Trojan.Kryptik!1.C606 (KTSE)
Yandex	Trojan.TrickBot!KgK63ceiz6w
SentinelOne	Static AI – Malicious PE
Fortinet	W32/TrickBot.DI!tr
AVG	Win32:BankerX-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	HEUR/QVM03.0.3FBB.Malware.Gen

How to remove Trojan.Win32.Mansabo.evh?

Trojan.Win32.Mansabo.evh removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X