Categories: SpyTrojan

How to remove “TrojanSpy:Win32/Banker!atmnm”?

The TrojanSpy:Win32/Banker!atmnm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:Win32/Banker!atmnm virus can do?

Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine TrojanSpy:Win32/Banker!atmnm?


File Info:
name: 4F1F527604B969578712.mlwpath: /opt/CAPEv2/storage/binaries/07be135580dd28e2f0dcf1ea88c08688603010b7f9edcfc37a0141ed0ecb99e7crc32: 1EEC2043md5: 4f1f527604b969578712e2ddab3353f3sha1: 8b3d44a6b563bfefbe0d311fed8c954fb14260f4sha256: 07be135580dd28e2f0dcf1ea88c08688603010b7f9edcfc37a0141ed0ecb99e7sha512: 9455ca7289df0ca84a8f38df1c1ea13b2cb07d566ea98e69d0a7332273d25941a6fb9ae12cb05e42c58dc2c86c8b19b414b08f4a4f4285d35637b5196621041essdeep: 12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOoHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZkiE6EhEtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F2F48D23F3D14837D1731A748C1BD2B9A826BF512D28758A7BE82D0D9F396913C392D6sha3_384: 842dca082048b8d8b431b2fcd590d2d528c2dd0857bef139f29267f9e3dd7d5578593dde9f1b20a35a2db2384149cf04ep_bytes: 558bec83c4f053b8547f4800e8c7d3f7timestamp: 2008-07-23 15:21:46
Version Info:
0: [No Data]

TrojanSpy:Win32/Banker!atmnm also known as:

MicroWorld-eScan	Trojan.Ranapama.AMY
ClamAV	Win.Trojan.Generic-9777994-0
FireEye	Generic.mg.4f1f527604b96957
CAT-QuickHeal	TrojanSpy.Banker.LY8
ALYac	Trojan.Ranapama.AMY
Cylance	unsafe
Zillya	Trojan.Banker.Win32.55
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Hacktool ( 005289611 )
K7GW	Hacktool ( 005289611 )
CrowdStrike	win/malicious_confidence_100% (D)
VirIT	Trojan.Win32.Banker5.ARIG
Cyren	W32/Trojan.ORSB-8183
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.FakeAlert.VA
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Ranapama.AMY
NANO-Antivirus	Trojan.Win32.Banker.oygn
SUPERAntiSpyware	Trojan.Agent/Gen-BankSpy
Avast	Win32:DropperX-gen [Drp]
Tencent	Trojan.Win32.Fakealert.b
TACHYON	Banker/W32.DP-Pharm.728576
Emsisoft	Trojan.Ranapama.AMY (B)
F-Secure	Trojan.TR/Delf.865208
DrWeb	Trojan.PWS.Gamania.10780
VIPRE	Trojan.Ranapama.AMY
TrendMicro	TROJ_FAKEAV.SMNA
McAfee-GW-Edition	BehavesLike.Win32.Generic.bh
Trapmine	suspicious.low.ml.score
Sophos	Mal/Banker-F
Ikarus	Trojan-Banker.Win32.Banker
GData	Win32.Trojan.FakeAV.Q
Jiangmin	TrojanSpy.Banker.rxi
Avira	TR/Delf.865208
Antiy-AVL	Trojan[Banker]/Win32.Banker
Xcitium	TrojWare.Win32.TrojanDownloader.Banload.~AHI@7lad3
Arcabit	Trojan.Ranapama.AMY
ViRobot	Trojan.Win32.Banker.766787
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	TrojanSpy:Win32/Banker!atmnm
Google	Detected
AhnLab-V3	Trojan/Win32.Banker.R8976
McAfee	FakeAV-DR
MAX	malware (ai score=87)
VBA32	TrojanPSW.Gamania
Malwarebytes	FakeAlert.Trojan.Downloader.DDS
Panda	Trj/Genetic.gen
Zoner	Trojan.Win32.89386
TrendMicro-HouseCall	TROJ_FAKEAV.SMNA
Rising	Downloader.FakeAV!1.DAF2 (CLASSIC)
Yandex	Trojan.GenAsa!miVNfz8AUWI
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/FAKEAV.Q!tr
BitDefenderTheta	Gen:NN.ZelphiF.36196.SGW@ayJW84gO
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.604b96
DeepInstinct	MALICIOUS