Categories: SpyTrojan

TrojanSpy:Win32/Banker.OY removal

The TrojanSpy:Win32/Banker.OY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:Win32/Banker.OY virus can do?

Executable code extraction
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine TrojanSpy:Win32/Banker.OY?


File Info:
crc32: FB227999md5: 135395d19dae0ee1730e8f1ff2375ca5name: 135395D19DAE0EE1730E8F1FF2375CA5.mlwsha1: 50c2e9c22397f44efe76fdc307b72bc35ec285f3sha256: 7384e5f3336eefb758c5ad8d5c956bde16c3939f6a1036bba85b24d450d8f8b9sha512: 8e410ebabdbf0151807abca2709c8e6a2c713f4bf3ebb6baca8e90ba2ed180f3fcfb56757cd2112935b0f50923a78e27ea9790277f5fa1f3224c39db60c79d3bssdeep: 384:/TYuFkBpHxlf3gVlb31evTLQv7HtLNBHUEfYjc6NBG/ygRr+XPO42qkF:/cubR1evPQv7NJJZvqBm4b2qktype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0804 0x04b0LegalCopyright: x5bc2x5bdex7684x523ax732cInternalName: x6ce8x5165x4e2dx8f6cx7ad94FileVersion: 1.00CompanyName: jmdcwComments: x5bc2x5bdex7684x523ax732cxb75200ProductName: x6ce8x5165x5c0fx52a9x624bProductVersion: 1.00OriginalFilename: x6ce8x5165x4e2dx8f6cx7ad94.exe

TrojanSpy:Win32/Banker.OY also known as:

MicroWorld-eScan	Trojan.GenericKD.40528159
McAfee	Generic.dx!135395D19DAE
BitDefender	Trojan.GenericKD.40528159
TrendMicro	TROJ_GEN.R002C0DAP19
F-Prot	W32/MalwareS.EC
Symantec	Trojan Horse
TrendMicro-HouseCall	TROJ_GEN.R002C0DAP19
GData	Trojan.GenericKD.40528159
NANO-Antivirus	Trojan.Win32.Banker.cxeucd
ViRobot	Trojan.Win32.S.Agent.53248.BMR
Rising	Backdoor.ASP.Agent.sed (CLOUD)
Ad-Aware	Trojan.GenericKD.40528159
Comodo	ApplicUnwnt@#1xkqyl413xcn2
F-Secure	Trojan.TR/Spy.Banker.OY
Zillya	Trojan.GenericKD.Win32.210500
McAfee-GW-Edition	Generic.dx!135395D19DAE
Emsisoft	Trojan.GenericKD.40528159 (B)
Cyren	W32/Risk.SEWQ-8634
Webroot	W32.Trojan.Malware.Gen
Avira	TR/Spy.Banker.OY
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	Win32.Troj.Generic.(kcloud)
Arcabit	Trojan.Generic.D26A691F
Microsoft	TrojanSpy:Win32/Banker.OY
ALYac	Trojan.GenericKD.40528159
TACHYON	Trojan/W32.VB-Agent.53248.DP
Cylance	Unsafe
Panda	Generic Malware
ESET-NOD32	a variant of Generik.MFIPFUH
Yandex	TrojanSpy.Banker!VoMB3i6f/Yk
Ikarus	Trojan.SuspectCRC
eGambit	HackTool.Generic
Fortinet	PossibleThreat
AVG	Win32:Spyware-gen [Spy]
Cybereason	malicious.19dae0
Avast	Win32:Spyware-gen [Spy]
Qihoo-360	Win32/Trojan.Spy.3ec