Trojan.Win32.NetWire.ipq removal instruction

The Trojan.Win32.NetWire.ipq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.NetWire.ipq virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Trojan.Win32.NetWire.ipq?


File Info:
crc32: 3F297381
md5: 20848888e920d213b9a5a10bd36db284
name: 20848888E920D213B9A5A10BD36DB284.mlw
sha1: 6cfe9c38f744d1f6a64969c1d90d965ee0df9fef
sha256: d8dba0b5f47f71d3072f705f119a21266208f385993876f6076f611a23ac27a8
sha512: 446e34d94164dc1f2f72234694f96e79e0a153e51f6bd2ee1aae39669dd56a1fd74274e362377039b86bc5c4c12e986b69af8001c6fd9f34d6c9ee0f9ee31f40
ssdeep: 49152:Nh+ZkldoPK8YaiXSDcNCjETH6fW3PoKNdIYRB+aDNs91qa+CyVuOe/PZx:e2cPK8mSDUa6qW3DdIYrs9Ez8Oe/PZ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: StormSoft Ltd
FileVersion: 1.7.674.0
CompanyName: StormSoft Ltd
ProductName: StormSoft Update
ProductVersion: 1.7.674.0
FileDescription: StormSoft Update
OriginalFilename: StormSoft_update.exe
Translation: 0x0809 0x04b0

Trojan.Win32.NetWire.ipq also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.42896282
FireEye	Generic.mg.20848888e920d213
ALYac	Trojan.GenericKD.42896282
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005599781 )
BitDefender	Trojan.GenericKD.42896282
K7GW	Trojan ( 005599781 )
CrowdStrike	win/malicious_confidence_90% (W)
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.NetWire.ipq
Alibaba	Trojan:Win32/NetWire.c47ad3da
Ad-Aware	Trojan.GenericKD.42896282
Emsisoft	Trojan.GenericKD.42896282 (B)
F-Secure	Trojan.TR/AD.NetWiredRc.nbf
DrWeb	Trojan.DownLoader33.29480
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.wc
Sophos	Mal/Generic-S
Avira	TR/AD.NetWiredRc.nbf
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Pynamer.A!rfn
Arcabit	Trojan.Generic.D28E8B9A
ZoneAlarm	Trojan.Win32.NetWire.ipq
GData	Trojan.GenericKD.42896282
Cynet	Malicious (score: 85)
AhnLab-V3	Win-Trojan/AutoInj.Exp
McAfee	Artemis!20848888E920
MAX	malware (ai score=83)
Malwarebytes	Trojan.MalPack.AutoIt
ESET-NOD32	a variant of Win32/Injector.Autoit.DXB
Tencent	Win32.Trojan.Netwire.Hoye
Ikarus	Trojan-Spy.HawkEye
Fortinet	W32/Injector_Autoit.DXB!tr
AVG	Win32:Malware-gen
Cybereason	malicious.8e920d
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.97d

How to remove Trojan.Win32.NetWire.ipq?

Trojan.Win32.NetWire.ipq removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X