Trojan

Trojan.Win32.NetWire.hsl (file analysis)

Malware Removal

The Trojan.Win32.NetWire.hsl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.NetWire.hsl virus can do?

  • Anomalous binary characteristics

How to determine Trojan.Win32.NetWire.hsl?


File Info:

crc32: E6FDD9B4
md5: c08c9df2f7f2634f8a2e31933a1755c2
name: nfdkjfgcvx.exe
sha1: 8b8b597de92399c0700f01e53e4e3aac92bfa1be
sha256: 75cb89c4db03c96a942802a1f294d3eb5290de7a6a7c137b6a80cc60f26b2ec2
sha512: 9a187b6fe3537f6aa7111125f5c8b6d3573cc2648e84a1985582c2ce90c5ca3bcd994817b87abfd2e6e833b4c13dec6093cedec86d209806b268fda12e56879e
ssdeep: 3072:xs2Q5pY9LLa0QsxL7pNfS6VMeKcEHfT0PEBpDncK1A8pr+NiFUb/SABdy6456IuJ:e1kBLqHbwu+81moUb/45cXi9Ds
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) interjectors 2019
InternalName: Palmaceae.exe
FileVersion: 2.2.1.4
CompanyName: McFadden
ProductName: unwaded
ProductVersion: 4.7.6.0
FileDescription: expatriating
OriginalFilename: conch.exe
Translation: 0x0409 0x04b0

Trojan.Win32.NetWire.hsl also known as:

DrWebTrojan.Inject3.31678
MicroWorld-eScanGen:Variant.Ulise.90904
FireEyeGeneric.mg.c08c9df2f7f2634f
McAfeeGenericRXJH-GW!C08C9DF2F7F2
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.NetWire.4!c
SangforMalware
K7AntiVirusTrojan ( 0055d1341 )
BitDefenderGen:Variant.Ulise.90904
K7GWTrojan ( 0055d1341 )
CrowdStrikewin/malicious_confidence_90% (W)
TrendMicroTROJ_GEN.R04AC0WLA19
BitDefenderThetaGen:NN.ZexaF.33550.ou3@aO4PYSii
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
GDataGen:Variant.Ulise.90904
KasperskyTrojan.Win32.NetWire.hsl
AlibabaTrojan:Win32/Netwire.630f09ca
NANO-AntivirusTrojan.Win32.Inject3.gkxlln
RisingTrojan.Generic@ML.89 (RDMK:0jTAHP4pgEpL+FPeH2vC2w)
Ad-AwareGen:Variant.Ulise.90904
SophosMal/Generic-S
ZillyaTrojan.NetWire.Win32.1045
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Dropper.dc
EmsisoftGen:Variant.Ulise.90904 (B)
IkarusTrojan.Win32.Crypt
CyrenW32/Trojan.OMST-1935
JiangminTrojanDropper.Scrop.ags
WebrootW32.Malware.Gen
AviraHEUR/AGEN.1044893
MAXmalware (ai score=80)
Antiy-AVLTrojan[PSW]/MSIL.Agensla
Endgamemalicious (high confidence)
ArcabitTrojan.Ulise.D16318
ZoneAlarmTrojan.Win32.NetWire.hsl
MicrosoftTrojan:Win32/Netwire.AB!MTB
AhnLab-V3Malware/Win32.RL_Generic.R303411
VBA32Trojan.Wacatac
ALYacGen:Variant.Ulise.90904
CylanceUnsafe
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Kryptik.GZGH
TrendMicro-HouseCallTROJ_GEN.R04AC0WLA19
SentinelOneDFI – Malicious PE
MaxSecureTrojan.Malware.74732540.susgen
FortinetW32/GenKryptik.DZQT!tr
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.de9239
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.6d5

How to remove Trojan.Win32.NetWire.hsl?

Trojan.Win32.NetWire.hsl removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment