Trojan

How to remove “TrojanDownloader:Win32/Regonid.A”?

Malware Removal

The TrojanDownloader:Win32/Regonid.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Regonid.A virus can do?

  • Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Regonid.A?


File Info:

name: 95C5ECECA50FF4C33626.mlw
path: /opt/CAPEv2/storage/binaries/ce2f131d47f8bc1fa884c43e2f584ca007bf6a210d3c5a505d3bc5d880aeaa48
crc32: F2B1ED12
md5: 95c5ececa50ff4c3362678d6f0ee6fe1
sha1: a5879d7c2ce78a2c5bb7c78f128b3b4e3d69ee50
sha256: ce2f131d47f8bc1fa884c43e2f584ca007bf6a210d3c5a505d3bc5d880aeaa48
sha512: 3a5bb40885ee304fe9f124cd57a8f018fdc160508d73e961f375637cf57ffb9fe6b6b745d049a4b76944ba349ffc935f574c7b91bccd819a0de28f58264ee7f2
ssdeep: 768:AmNaP/CF5FnW4qpOnOmt7teR2ALWp5JwuvFkX2Mm7Bl5sl:AmNrNW4qIOIeR2ALWp8uvFOF+sl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T141137D23B5E2C033DC8201F124755545ABBF59316AF882976B641C8EBF31B96EB3A347
sha3_384: 6daf501d45c8f1dfa2de7672c77e13c9a37a3a64f65ea1dc4aa9ca0e18bb8892f1b1cd189efc4086ba3ffa345d57a9f8
ep_bytes: 6a606840824000e8e4160000bf940000
timestamp: 2011-08-20 01:43:12

Version Info:

0: [No Data]

TrojanDownloader:Win32/Regonid.A also known as:

BkavW32.Common.87FE16A3
LionicTrojan.Win32.Mudrop.b!c
MicroWorld-eScanTrojan.Generic.7051864
FireEyeTrojan.Generic.7051864
SkyhighBehavesLike.Win32.Infected.pm
McAfeeGeneric.lg
Cylanceunsafe
ZillyaDropper.Mudrop.Win32.7055
SangforDownloader.Win32.Mudrop.Vx0c
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaTrojanDownloader:Win32/Mudrop.2785a1ea
K7GWRiskware ( 0015e4f01 )
K7AntiVirusRiskware ( 0015e4f01 )
SymantecTrojan Horse
ESET-NOD32Win32/Agent.TOD
ZonerTrojan.Win32.7040
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Dropper.Win32.Mudrop.vky
BitDefenderTrojan.Generic.7051864
NANO-AntivirusTrojan.Win32.Offend.nqaua
AvastWin32:Agent-APGZ [Trj]
TencentMalware.Win32.Gencirc.13b2636f
SophosMal/Generic-S
F-SecureTrojan.TR/Offend.7051864
DrWebTrojan.DownLoad3.8863
VIPRETrojan.Generic.7051864
TrendMicroTROJ_SPNR.08LO11
EmsisoftTrojan.Generic.7051864 (B)
IkarusTrojan-Dropper.Win32.Mudrop
GDataWin32.Trojan.Agent.AJPGMD
JiangminTrojan/Generic.mwkz
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Offend.7051864
MAXmalware (ai score=86)
Antiy-AVLTrojan[Dropper]/Win32.Mudrop
KingsoftWin32.Troj.Undef.a
XcitiumMalware@#2jgif4pq5e0f3
ArcabitTrojan.Generic.D6B9A58
ViRobotTrojan.Win.Z.Mudrop.45056
ZoneAlarmTrojan-Dropper.Win32.Mudrop.vky
MicrosoftTrojanDownloader:Win32/Regonid.A
VaristW32/Downloader.QKVS-6627
AhnLab-V3Downloader/Win32.Korad.C1
VBA32TrojanDropper.Mudrop
ALYacTrojan.Generic.7051864
TACHYONTrojan-Dropper/W32.MultiDrop.45056.B
MalwarebytesTrojan.Agent
PandaGeneric Malware
TrendMicro-HouseCallTROJ_SPNR.08LO11
RisingTrojan.Generic@AI.85 (RDML:RIo9ce7W1FVLeByfClu9oA)
YandexTrojan.DL.Regonid!rda5YHuql0o
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Agent-APGZ [Trj]
DeepInstinctMALICIOUS

How to remove TrojanDownloader:Win32/Regonid.A?

TrojanDownloader:Win32/Regonid.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment