Trojan

TrojanClicker:Win32/Swind.C information

Malware Removal

The TrojanClicker:Win32/Swind.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanClicker:Win32/Swind.C virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Anomalous binary characteristics

How to determine TrojanClicker:Win32/Swind.C?


File Info:

crc32: D8D0C0B4
md5: 4b67d3aa9eb0f35d2d5012dee88bd8cc
name: winxp2.exe
sha1: 1e309fbcfed4b268e12549acfa5a8ecb35f6b4b3
sha256: 216de7756cff88633b61c976693e61f13eb654609e9cc950762f38515b256223
sha512: 45f3d4d068bca706829e6e9545b3b6f0e8a37707ca07bd9894348578b85fd3d666c13ba7affec3cd065d4a1a8fc6d41af28217381cfb7831dfbdc0a7c4411008
ssdeep: 98304:kluQSNVel3MyajDXHpOcfPBrXalmlMsTZLnFaf:wuQUerWwshalWNFaf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2001 - 2002 Indigo Rose Corporation
InternalName: setup
FileVersion: 6.0.1.2
CompanyName: Indigo Rose Corporation http://www.indigorose.com
PrivateBuild:
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: This setup code is the property of Indigo Rose Corporation
ProductName: setup
SpecialBuild:
ProductVersion: 6.0.1.2
FileDescription: Setup Factory 6.0 Setup Launcher
OriginalFilename: setup.exe
Translation: 0x0409 0x04e4

TrojanClicker:Win32/Swind.C also known as:

BkavW32.VanetonF.Trojan
MicroWorld-eScanTrojan.StartPage.AABC
FireEyeTrojan.StartPage.AABC
Qihoo-360Win32/Trojan.57b
McAfeeArtemis!4B67D3AA9EB0
CylanceUnsafe
VIPREShowBehind
SangforMalware
BitDefenderTrojan.StartPage.AABC
Cybereasonmalicious.a9eb0f
F-ProtW32/MalwareF.OKZQ
SymantecTrojan.Startpage
Paloaltogeneric.ml
ClamAVWin.Trojan.Startpage-400
GDataAdware.Agent.NGK
Kasperskynot-a-virus:AdWare.Win32.ShowBehind.a
AlibabaTrojan:Win32/StartPage.abc06ea7
NANO-AntivirusRiskware.Win32.ShowBehind.bbssr
ViRobotTrojan.Win32.Z.Showbehind.3890745
AegisLabAdware.Win32.ShowBehind.2!c
RisingTrojan.Clicker-Swind!8.7785 (CLOUD)
Ad-AwareTrojan.StartPage.AABC
EmsisoftTrojan.StartPage.AABC (B)
ComodoApplicUnwnt@#17ur8pbwne931
F-SecureTrojan.TR/StartPage.JM
DrWebTrojan.StartPage.48
TrendMicroADWARE_SHOWBEHIND
McAfee-GW-EditionArtemis!PUP
CMCAdWare.Win32.JumpGate!O
SophosGeneric PUA BO (PUA)
Ikarusnot-a-virus:AdWare.Win32.ShowBehind
CyrenW32/Risk.HNMA-2415
WebrootAdware.ShowBehind
AviraTR/StartPage.JM
MAXmalware (ai score=100)
Antiy-AVLGrayWare[AdWare]/Win32.ShowBehind
ArcabitTrojan.StartPage.AABC, Adware.Agent.NGK
ZoneAlarmnot-a-virus:AdWare.Win32.ShowBehind.a
MicrosoftTrojanClicker:Win32/Swind.C
BitDefenderThetaAI:Packer.5131E2A01F
ALYacAdware.Agent.NGK
TACHYONTrojan-Clicker/W32.ShowBehind.3890745
VBA32AdWare.ShowBehind
PandaAdware/ShowBehind
ESET-NOD32Win32/Adware.ShowBehind.A
TrendMicro-HouseCallHACKINGTOOLS_TROJANKIT
TencentWin32.Adware.Showbehind.bcol
YandexPUA.ShowBehind!
FortinetW32/StartPage.TV!tr
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
MaxSecureTrojan.Malware.1018996.susgen

How to remove TrojanClicker:Win32/Swind.C?

TrojanClicker:Win32/Swind.C removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment