Trojan

Trojan.Win32.Nymaim.vho malicious file

Malware Removal

The Trojan.Win32.Nymaim.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Nymaim.vho virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Win32.Nymaim.vho?


File Info:

crc32: E76F74FE
md5: 5c64958af8b477790d85e80a9985c789
name: tmpmzau39h7
sha1: 6477f2d412354d209296763ef486677512165b6c
sha256: 22be55e5d13bb5ce4e1353339c895f053cd40fe2372b2e15bdf55aaf28dc4275
sha512: d494706e4a8f52822e36f251c4bc6842ac81f5afa7aea6d02564dd6a7b5bd8035ac177f6ea4c05c3959daa8c15047ef7b4c89a11b81901ffe9b85ed424537c35
ssdeep: 12288:TBd52bW0Aqu4vv23fmcIfwT9uob0aHX5VVYqWpIM0JbeyDir:TBdRHQ4fJwwTt0gXASM0JbeEir
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Nymaim.vho also known as:

BkavHW32.Packed.
MicroWorld-eScanTrojan.Mint.Zamg.Q
FireEyeGeneric.mg.5c64958af8b47779
CAT-QuickHealBackdoor.Tofsee.ZZ4
McAfeePacked-FMR!5C64958AF8B4
ALYacTrojan.Mint.Zamg.Q
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 0053c2731 )
BitDefenderTrojan.Mint.Zamg.Q
K7GWTrojan ( 0053c2731 )
Cybereasonmalicious.af8b47
TrendMicroTrojan.Win32.NYMAIM.SMC
F-ProtW32/S-d57abbbc!Eldorado
SymantecPacked.Generic.493
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Razy-6710046-0
GDataTrojan.Mint.Zamg.Q
KasperskyHEUR:Trojan.Win32.Nymaim.vho
NANO-AntivirusTrojan.Win32.Nymaim.firiaz
RisingDownloader.Nymaim!8.781 (RDMK:cmRtazrTeAJKTcH/M5g3dSyMX8qL)
Endgamemalicious (high confidence)
EmsisoftTrojan.Mint.Zamg.Q (B)
ComodoTrojWare.Win32.Crypt.MB@7wxwas
F-SecureHeuristic.HEUR/AGEN.1038376
DrWebTrojan.Nymaim.226
ZillyaTrojan.Nymaim.Win32.10885
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.jc
Trapminemalicious.high.ml.score
SophosMal/Elenoocka-G
IkarusTrojan-Downloader.Nymaim
CyrenW32/S-d57abbbc!Eldorado
JiangminTrojan.Nymaim.elc
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1038376
eGambitUnsafe.AI_Score_100%
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.Fuerboos
ArcabitTrojan.Mint.Zamg.Q
ZoneAlarmHEUR:Trojan.Win32.Nymaim.vho
MicrosoftTrojanDownloader:Win32/Nymaim.M!bit
AhnLab-V3Trojan/Win32.Nymaim.R239002
Acronissuspicious
VBA32BScope.Trojan.Fuerboos
TACHYONTrojan/W32.Agent.656896.CP
Ad-AwareTrojan.Mint.Zamg.Q
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.GLQZ
TrendMicro-HouseCallTrojan.Win32.NYMAIM.SMC
TencentMalware.Win32.Gencirc.10b0ccca
SentinelOneDFI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GLXU!tr
BitDefenderThetaGen:NN.ZexaF.34100.OmW@aylF68ki
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM19.1.07F1.Malware.Gen

How to remove Trojan.Win32.Nymaim.vho?

Trojan.Win32.Nymaim.vho removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment