Trojan:Win32/Filisto.B!dha removal

The Trojan:Win32/Filisto.B!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Filisto.B!dha virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan:Win32/Filisto.B!dha?


File Info:
name: 41CC3EB12A41E5B2E740.mlw
path: /opt/CAPEv2/storage/binaries/c0be532e9fb71e0462f9bfdc8754df320be960b9d510a0b3b6d6cf128c537658
crc32: 88C981C1
md5: 41cc3eb12a41e5b2e74034abed86bf22
sha1: 5f67e9d2523558c0fef56af470995b24ae7a3090
sha256: c0be532e9fb71e0462f9bfdc8754df320be960b9d510a0b3b6d6cf128c537658
sha512: 34faf1986a89c3e62c1a90baeba124eb9ea295312ae12b1ed43d3315e87e7955d5f87406c2c2e6b2ec65ce665824d7230dfb70dcc910d93ea54831f76cd37a1e
ssdeep: 3072:gu00SdzcXlHSiDq+Z3ltievwhYPOLLwkSpEDb9zwxJhk7X5YsYH/9ZVC3GNAH:v0ZdzoEc10UULLwNCDbcPkDwU3e6
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1EB24DF21B2D09079E5AF46790874CB011B6EBC65DBB09DD73B88029D5E312D06F3AFE6
sha3_384: 56736aa5652e2015a22b852bf7d418e3067d50ed85ff60fd7d3d9480e098ce30130003d6cb7ebbf084ddb2f4fa75b676
ep_bytes: 558bec837d0c017505e82a260000ff75
timestamp: 2017-06-17 03:11:39

Version Info:
0: [No Data]

Trojan:Win32/Filisto.B!dha also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.LotusBlossom.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.387551
FireEye	Generic.mg.41cc3eb12a41e5b2
Skyhigh	BehavesLike.Win32.VirRansom.dc
McAfee	GenericRXIP-SF!41CC3EB12A41
Cylance	unsafe
Zillya	Trojan.LotusBlossom.Win32.44
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Filisto.77f756cd
K7GW	Trojan ( 00512fe21 )
K7AntiVirus	Trojan ( 00512fe21 )
BitDefenderTheta	Gen:NN.ZedlaF.36744.oq4@a4sidlc
Symantec	Backdoor.Sagerunex
ESET-NOD32	a variant of Win32/Kryptik.FVEQ
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.LotusBlossom.gen
BitDefender	Gen:Variant.Graftor.387551
NANO-Antivirus	Trojan.Win32.Scieron.ergmkz
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.11a3aac1
Emsisoft	Gen:Variant.Graftor.387551 (B)
F-Secure	Heuristic.HEUR/AGEN.1301814
VIPRE	Gen:Variant.Graftor.387551
TrendMicro	TROJ_GEN.R002C0DI823
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-R
Ikarus	Trojan.Win32.Crypt
GData	Gen:Variant.Graftor.387551
Jiangmin	Backdoor.Agent.cd
Webroot	W32.Malware.Gen
Google	Detected
Avira	HEUR/AGEN.1301814
Antiy-AVL	Trojan[APT]/Win32.Apt30
Kingsoft	malware.kb.a.1000
Xcitium	Malware@#2bkc8taz2yjne
Arcabit	Trojan.Graftor.D5E9DF
ViRobot	Trojan.Win32.Z.Lotusblossom.229376
ZoneAlarm	HEUR:Trojan.Win32.LotusBlossom.gen
Microsoft	Trojan:Win32/Filisto.B!dha
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Generic.C1947106
VBA32	Trojan.LotusBlossom
ALYac	Trojan.LotusBlossom.A
Malwarebytes	Malware.AI.4271181596
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DI823
Rising	Backdoor.Agent!8.C5D (TFE:6:WyJ89LMmfrS)
Yandex	Trojan.GenAsa!wDDTcCmkZqo
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.10732980.susgen
Fortinet	W32/Graftor.387551!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Filisto.B!dha?

Trojan:Win32/Filisto.B!dha removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X