Trojan:Win32/Malex!C removal instruction

The Trojan:Win32/Malex!C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Malex!C virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Creates a copy of itself

How to determine Trojan:Win32/Malex!C?


File Info:
name: 66E29436029703599A6C.mlw
path: /opt/CAPEv2/storage/binaries/c07a3b9f55fa81db80bdc5dd28568019e0c4d4ed46dedab088a22ec2194da33d
crc32: 0412D447
md5: 66e29436029703599a6c2bd2a9241d31
sha1: ef780c2d65bb8b37d8a60cdb32ff9110aadd7b1f
sha256: c07a3b9f55fa81db80bdc5dd28568019e0c4d4ed46dedab088a22ec2194da33d
sha512: b36d2350369b3d681c1545ca9b308e46a93ac59ce52f6b065ac5504704f57ea9fba250c02e8dbcbffe67bb372a826142d8ffa9b2ff623f221f2735b267e4329a
ssdeep: 768:eyy5A4qeFELXPq8woJrGQpRcaVH5AceGjCroQfVc3:eyreF8Pq8CwcaxdjCtVc3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T101033B177D26C436C1158AB0DE6E26BDEBF399750996490723A03C7C5D3AEC2DC12E2E
sha3_384: 9eec0b0a5d8a9e3e3747bfe64da9cb4b17ae259b59babb136fcdafce19b447cfc530c349977d17a80d30c84d0163a68c
ep_bytes: 558bec83ec4456ff15949040008bf08a
timestamp: 2006-04-03 07:07:27

Version Info:
0: [No Data]

Trojan:Win32/Malex!C also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.4!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.66e2943602970359
Skyhigh	BehavesLike.Win32.Dropper.pm
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	AI:Packer.6B8B44971F
Symantec	Trojan Horse
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.nesbwm
NANO-Antivirus	Trojan.Win32.Nethief.bccbsm
Avast	Win32:Malware-gen
Rising	Trojan.Generic@AI.93 (RDML:kMTSzQhsy4dJ1RX1tiHPqQ)
Sophos	Generic ML PUA (PUA)
F-Secure	Heuristic.HEUR/Malware
DrWeb	BackDoor.Nethief.126
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor/Nethief.aq
Google	Detected
Avira	HEUR/Malware
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	malware.kb.a.1000
Xcitium	Backdoor.Win32.GirlinRed.D@f7ztx
ZoneAlarm	Trojan.Win32.Agent.nesbwm
Microsoft	Trojan:Win32/Malex.gen!C
Varist	W32/Backdoor.VCRW-6185
McAfee	Artemis!66E294360297
VBA32	Trojan.Agent
Panda	Generic Malware
Yandex	Backdoor.Nethief!8/plc+6zFIY
Ikarus	Backdoor.Win32.Ceckno
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.NAG!tr
AVG	Win32:Malware-gen
Cybereason	malicious.d65bb8
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Malex!C?

Trojan:Win32/Malex!C removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X