How to remove “Trojan.Win32.Nobady.rxh”?

The Trojan.Win32.Nobady.rxh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Nobady.rxh virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Uses Windows utilities to create a scheduled task
• Deletes executed files from disk
• Anomalous binary characteristics

How to determine Trojan.Win32.Nobady.rxh?

File Info:
name: CD0466FA379819AF096A.mlw
path: /opt/CAPEv2/storage/binaries/f291e3df7c49753b1718c389df15f96e87bb96fb993f488486f065abc43c3107
crc32: 8E4B0C76
md5: cd0466fa379819af096ad6b5db7630a2
sha1: 7585462ffa91a5448caadf22498a33143dccadb8
sha256: f291e3df7c49753b1718c389df15f96e87bb96fb993f488486f065abc43c3107
sha512: 3e55587200ca0c17a50f6e58fc5a31d3dbca8b153b79c4383be2896c2140bac0c97ccdf0dca3507ca5ffe7c1bd0369f48eb1079beaa7f2d661a15c6283d19809
ssdeep: 6144:0h3QRXVNARknS5lIlkKyVkEl4R/l/z1SszzDH:zKRcS5jkxR9/zxLH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18D848C57F34D8B66E183037E2DDA8AF1672AFD38137782553039BB1E1A32A204776791
sha3_384: 3e123e47c546a90b87deddb1aeed6490b9235bb338262f983dce2d6a3aa68c490c06a662d4cff20e007e09359f1ada88
ep_bytes: 60be000000008a860010400080e85a80
timestamp: 2003-04-24 06:27:43

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: AdwTest.exe
LegalCopyright: TODO: (c) .  All rights reserved.
OriginalFilename: AdwTest.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Trojan.Win32.Nobady.rxh also known as:

How to remove Trojan.Win32.Nobady.rxh?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.