Should I remove "Trojan.Win32.NetWire.hum"?

The Trojan.Win32.NetWire.hum is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.NetWire.hum virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
A process created a hidden window
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

mardjdf.ug

a.tomx.xyz

kjsdtrfuyhgxcv.ru

How to determine Trojan.Win32.NetWire.hum?


File Info:
crc32: 12B98AE1
md5: 25a857bcd5bdd5fba6ebfa73c279d0ce
name: ndcvbchg.exe
sha1: 4ba156fb34bd2c18e28f5233307f54c3a4b94e41
sha256: 587cc3138283f3a20699729923f35f17075eac1e5bd79bacd842c7d527cf3be8
sha512: 3ba6d4f80189d821da9bbeb64dc5ff37763a7ac744b047bdeb5950b7c300bb2729544301703dfc44187590def9917ec99ee1912e987ea754a8bbc71c280f75cc
ssdeep: 6144:m10LCofs/ic8Uo1DeXggEYX9FnjhOxXuq+xz3SVGwe:hLCCsKsuUEYnjsxXr23Qe
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) Genvieve 2019
InternalName: fatten.exe
FileVersion: 7.4.6.3
CompanyName: acrostolium
ProductName: musicals
ProductVersion: 8.1.7.3
FileDescription: irreclaimability
OriginalFilename: hemipinnate.exe
Translation: 0x0409 0x04b0

Trojan.Win32.NetWire.hum also known as:

FireEye	Generic.mg.25a857bcd5bdd5fb
McAfee	GenericRXJA-NE!25A857BCD5BD
Cylance	Unsafe
Sangfor	Malware
Cybereason	malicious.b34bd2
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.NetWire.hum
Rising	Backdoor.NanoBot!8.28C (TFE:5:2jfdOYGrbID)
Endgame	malicious (high confidence)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	BackDoor.Wirenet.540
VIPRE	LooksLike.Win32.Crowti.b (v)
TrendMicro	TROJ_GEN.R020C0DLM19
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Trapmine	malicious.moderate.ml.score
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Azorult.GT!MTB
ZoneAlarm	Trojan.Win32.NetWire.hum
BitDefenderTheta	Gen:NN.ZexaF.33556.pu3@aW9nTKpi
ESET-NOD32	a variant of Win32/GenKryptik.EAPI
TrendMicro-HouseCall	TROJ_GEN.R020C0DLM19
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_90%
Fortinet	W32/Generic.AP.3320F2!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM10.1.0D8B.Malware.Gen

How to remove Trojan.Win32.NetWire.hum?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan.Win32.NetWire.hum”?