TrojanSpy.Snake removal tips

The TrojanSpy.Snake is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanSpy.Snake virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine TrojanSpy.Snake?


File Info:
name: 5B31CA9F86A8CB608208.mlw
path: /opt/CAPEv2/storage/binaries/5c5176b6c75b99c90c7cfa20611e8728b8e65d1538795cd5a58829019435b8ef
crc32: EA405CF1
md5: 5b31ca9f86a8cb608208c735a6bcffb5
sha1: 04df29193075296f9cd9b9798a16ce8317172dcd
sha256: 5c5176b6c75b99c90c7cfa20611e8728b8e65d1538795cd5a58829019435b8ef
sha512: f98964642ea9b2e00655fab5c75c452df883b254f6f1908b8180b55e1a9bb0846a98dc9d6b1ef6ab6bda0dae4affa826327a67d4fc28b3af305cd8928d75e199
ssdeep: 12288:sMw4EAPcLqJ5l1P15NUhT3yZrn0aHDyq9DSXALFW97caLU9:sMwtAPcLqJ5l195NUx3yBDyq0GP9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T194E412556B7CC927D2A2783F6522B24C30AEAE145F56C564BB633AFD9EBC7021D07203
sha3_384: 54bc6131976fcd9b333c2cb3b877ba6f14216a49e9e3d68500cbad3f35f2b60a110f186d3f38e760107f743b64a9fbf6
ep_bytes: 81ecd40200005356576a205f33db6801
timestamp: 2020-08-01 02:43:17

Version Info:
Comments: Tekstjustering Kommunikationsprocessens
CompanyName: Ricciaceae Nonpermissive
FileVersion: 1.1.0.0
LegalCopyright: Dissemblingly Putoff
LegalTrademarks: tennis Strammerne Konkurrencevilkaarets
OriginalFilename: Empasm.exe
Translation: 0x0409 0x04e4

TrojanSpy.Snake also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.66140454
FireEye	Trojan.GenericKD.66140454
ALYac	Trojan.GenericKD.66140454
Malwarebytes	Generic.Injector.Malicious.DDS
Sangfor	Trojan.Win32.Zapchast.Vldn
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Zapchast.94e21986
K7GW	Trojan ( 005a197d1 )
K7AntiVirus	Trojan ( 005a197d1 )
VirIT	Trojan.Win32.Genus.DPWR
Cyren	W32/Agent.LNWT-7996
Symantec	Trojan Horse
APEX	Malicious
Avast	Win32:Evo-gen [Trj]
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.66140454
Tencent	Win32.Trojan.Zapchast.Hajl
F-Secure	Trojan.TR/Inject.ruyxi
VIPRE	Trojan.GenericKD.66140454
TrendMicro	Trojan.Win32.FRS.VSNW1CC23
McAfee-GW-Edition	BehavesLike.Win32.Browser.jc
Sophos	Mal/Generic-S
Webroot	W32.Malware.Gen
Avira	TR/Inject.ruyxi
Xcitium	Malware@#2acuq8l7yb4y2
Arcabit	Trojan.Generic.D3F13926
ZoneAlarm	HEUR:Trojan.NSIS.Makoob.gen
Google	Detected
VBA32	TrojanSpy.Snake
Cylance	unsafe
Panda	Trj/Agent.AY
Yandex	Trojan.Igent.bZ2zkN.4
Fortinet	W32/BVJ!tr
AVG	Win32:Evo-gen [Trj]

How to remove TrojanSpy.Snake?

TrojanSpy.Snake removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X