Trojan.Win32.Refinka.pxb (file analysis)

The Trojan.Win32.Refinka.pxb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Refinka.pxb virus can do?

Unconventionial language used in binary resources: Sutu
Anomalous binary characteristics

How to determine Trojan.Win32.Refinka.pxb?


File Info:
crc32: F47F4F4F
md5: 71057a1c7283d3f29dd85f9a62432793
name: 71057A1C7283D3F29DD85F9A62432793.mlw
sha1: 1cfa03451783ccbf2a6e815e4012af933c825d5e
sha256: e69807da033b8faddf0321efefcca25c941bc81983373e7e408e89d94a0631f0
sha512: 16ec4d238bfc7b275078c66459e9c9519d604dbb8ef414f49e98b3f6be2142dfcdd15045580294980425cbd40f860a03e0e4fc08989e402e9e11151d733634a4
ssdeep: 12288:gcpHnRMhIEl7cNJmyN+27AElkjv9JI1Jv2UgfZkFSQw20NFYAvfFSw:jHniM0yYE9Jvw6SQw20NFYAvfQw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright ? 2014
InternalName: QserIMEI
FileVersion: 1.0
CompanyName: 
ProductName:  QserIMEI
ProductVersion: 1.0
FileDescription: QserIMEI (Debug x86)
OriginalFilename: QserIMEI.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Refinka.pxb also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cylance	Unsafe
Zillya	Trojan.Refinka.Win32.1884
Cybereason	malicious.c7283d
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Tiggre-9845940-0
Kaspersky	Trojan.Win32.Refinka.pxb
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Sophos	Generic PUA BM (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Kudj.tm
Jiangmin	Trojan.Refinka.azk
Avira	TR/Refinka.wbndc
Antiy-AVL	Trojan/Generic.ASMalwS.32A01BE
Kingsoft	Win32.Infected.AutoInfector.a.(kcloud)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	Trojan.Win32.Refinka.pxb
GData	Win32.Application.PUPStudio.B
AhnLab-V3	Malware/Win32.Generic.C4324042
McAfee	Artemis!71057A1C7283
VBA32	BScope.Trojan.Downloader
Yandex	Trojan.Refinka!kkqpO8pKhuQ
Ikarus	PUA.BlackMoon
MaxSecure	Trojan.Malware.116864820.susgen
AVG	Win32:Malware-gen

How to remove Trojan.Win32.Refinka.pxb?

Trojan.Win32.Refinka.pxb removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X