Categories: SpyTrojan

Should I remove “TrojanSpy.Win64.CardThief”?

The TrojanSpy.Win64.CardThief is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanSpy.Win64.CardThief virus can do?

    How to determine TrojanSpy.Win64.CardThief?

    
    

    File Info:

    crc32: F5D29374md5: 23c3ceabc2831b0626623865c4dd76f1name: 64.exesha1: 27e99e527914eca78b851bb9f2a4d0441d26e7e3sha256: e00aa1c4179bbe05d37d8f328a31cd815196e86c58fb064fb898ece8eab5b63csha512: 84ef0d5e241cc3f41da6777fb27cef42a84f485986b2a4e3a0a52091ad4805ba94a90c28aacc7a3bbddcc158b0a47c062417ac46a13cdacf68aa395dde133827ssdeep: 3072:/oLsz+2pqJ+eKLJ0HNwCT5DSB6GTsa4+L3pH+1k3R8x9o0Ziy065LRI:Xpn5LaT5DSHIa4IT3SvxZfdtype: PE32+ executable (GUI) x86-64, for MS Windows

    Version Info:

    0: [No Data]

    TrojanSpy.Win64.CardThief also known as:

    Bkav W32.GenericBagoposA.Trojan
    MicroWorld-eScan Trojan.Generic.15009602
    McAfee Trojan-FINY!23C3CEABC283
    Cylance Unsafe
    Zillya Trojan.Agent.Win64.658
    Sangfor Malware
    K7AntiVirus Trojan ( 003de83f1 )
    BitDefender Trojan.Generic.15009602
    K7GW Trojan ( 003de83f1 )
    Cybereason malicious.bc2831
    Arcabit Trojan.Generic.DE50742
    TrendMicro TSPY64_POSNEWT.SM
    Cyren W64/S-9f312a03!Eldorado
    ESET-NOD32 a variant of Win64/Agent.AV
    Paloalto generic.ml
    ClamAV Win.Malware.Cardthief-1
    Kaspersky Trojan.Win64.Agent.djx
    Alibaba TrojanSpy:Win32/Bagopos.823231f7
    NANO-Antivirus Trojan.Win64.Agent.dxgoit
    ViRobot Trojan.Win32.Z.Agent.194048.LC
    SUPERAntiSpyware Trojan.Agent/Gen-PWS
    Rising Trojan.Generic!8.C3 (TFE:5:JLwOIswbOsN)
    Ad-Aware Trojan.Generic.15009602
    Emsisoft Trojan.Generic.15009602 (B)
    Comodo Malware@#11bqtzkbqk2bc
    F-Secure Heuristic.HEUR/AGEN.1029517
    DrWeb Trojan.PosJsd.5
    VIPRE Trojan.Win32.Generic!BT
    McAfee-GW-Edition Trojan-FINY!23C3CEABC283
    Fortinet W64/Agent.AZ!tr
    Trapmine malicious.moderate.ml.score
    FireEye Generic.mg.23c3ceabc2831b06
    Sophos Troj/Spy-AGI
    SentinelOne DFI – Suspicious PE
    F-Prot W64/S-9f312a03!Eldorado
    Jiangmin Trojan.Win64.Agent.b
    Webroot Trojan.Dropper.Gen
    MAX malware (ai score=100)
    Endgame malicious (high confidence)
    Microsoft TrojanSpy:Win32/Bagopos.A
    ZoneAlarm Trojan.Win64.Agent.djx
    Acronis suspicious
    VBA32 TrojanSpy.Win64.CardThief
    ALYac Trojan.Generic.15009602
    TACHYON Trojan-Spy/W32.Agent.194048.L
    Panda Trj/CI.A
    TrendMicro-HouseCall TSPY64_POSNEWT.SM
    Tencent Win64.Trojan.Agent.Hrpb
    Yandex TrojanSpy.CardThief!
    Ikarus Trojan-Spy.Win32.Bagopos
    eGambit Unsafe.AI_Score_99%
    GData Trojan.Generic.15009602
    AVG Win32:GenMalicious-ILQ [Trj]
    Avast Win32:GenMalicious-ILQ [Trj]
    CrowdStrike win/malicious_confidence_90% (W)
    Qihoo-360 Win64/Trojan.70e

    How to remove TrojanSpy.Win64.CardThief?

    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.
    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Recent Posts

    MSIL/GenKryptik.GXIZ information

    The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

    1 day ago

    Malware.AI.2789448175 (file analysis)

    The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

    1 day ago

    Jalapeno.1878 removal instruction

    The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

    1 day ago

    What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

    The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

    2 days ago

    How to remove “Worm.Win32.Vobfus.exmt”?

    The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

    2 days ago

    About “TrojanDownloader:Win32/Beebone.JO” infection

    The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

    2 days ago