Trojan

Trojan.Win32.PowerShell.ctn information

Malware Removal

The Trojan.Win32.PowerShell.ctn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.PowerShell.ctn virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.PowerShell.ctn?


File Info:

crc32: 171AF2EB
md5: c791c511e410ba16bf086f5478150998
name: C791C511E410BA16BF086F5478150998.mlw
sha1: 6db5d3ce4ab3b8bbff38d9595bf77a4955193596
sha256: fa640fcd22905d78d0983e52f16972cbcbd5bfab6279336764ff714044fc9a86
sha512: 4938aae0e1901b838c93b7a700036f384afe3a8679bcbbe5318d856a3e5ad6e24a62e0f56d8c3499d138cd1a77fa536d3560d828800b07dd330a015f3b105d8a
ssdeep: 6144:J8FfBfG0zViHj43xI2036kFEn9o0mOeyf:J8FfsvdlG9C6f
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: www.ceofix.net
Assembly Version: 1.0.0.0
InternalName: WebCamFix.exe
FileVersion: 1.0
ProductName: WebCamFix
ProductVersion: 1.0
FileDescription: www.ceofix.net
OriginalFilename: WebCamFix.exe

Trojan.Win32.PowerShell.ctn also known as:

LionicTrojan.Win32.PowerShell.4!c
CynetMalicious (score: 99)
CAT-QuickHealTrojan.WacatacFC.S17873288
ALYacTrojan.GenericKD.38001360
CylanceUnsafe
AlibabaTrojan:Win32/PowerShell.e0b88b9f
Cybereasonmalicious.e4ab3b
CyrenW32/MSIL_Kryptik.BWA.gen!Eldorado
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.PowerShell.ctn
BitDefenderTrojan.GenericKD.38001360
MicroWorld-eScanTrojan.GenericKD.38001360
Ad-AwareTrojan.GenericKD.38001360
BitDefenderThetaGen:NN.ZemsilF.34266.nm0@aaqmG8i
TrendMicroTROJ_GEN.R002C0PKA21
McAfee-GW-EditionRDN/Generic.dx
FireEyeTrojan.GenericKD.38001360
EmsisoftTrojan.GenericKD.38001360 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/PShell.huakp
GDataTrojan.GenericKD.38001360
AhnLab-V3Trojan/Win32.Kryptik.C4247069
McAfeeRDN/Generic.dx
MAXmalware (ai score=81)
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PKA21
FortinetPossibleThreat
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Win32.PowerShell.ctn?

Trojan.Win32.PowerShell.ctn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment