Should I remove “Trojan:Win32/NativeZone.C!dha”?

The Trojan:Win32/NativeZone.C!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/NativeZone.C!dha virus can do?

How to determine Trojan:Win32/NativeZone.C!dha?


File Info:
crc32: 20CBA60A
md5: 1c3b8ae594cb4ce24c2680b47cebf808
name: 1C3B8AE594CB4CE24C2680B47CEBF808.mlw
sha1: 1fb12e923bdb71a1f34e98576b780ab2840ba22e
sha256: ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330
sha512: 2917e5a1ecfa4343f0de204804487db368371b10b9ae3cc2ebc7e1da74c679c1ef198c2c183572f537fed7c1bc8c7183513fcadf6dcad3749bc401f32b2fb6c1
ssdeep: 6144:GBv2rCsfI34JBE8LCiohg05tnCCRem/V9FkkKdKb+/++9GIyRv9QTaq+D/aYndv:GBurzfI2B9roDtVcKb+/+EzD+7aJ
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Trojan:Win32/NativeZone.C!dha also known as:

ALYac	Trojan.Agent.CobaltStrike
Malwarebytes	Malware.AI.4237397096
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Khalesi.9d34a9b8
K7GW	Trojan ( 0057d2181 )
K7AntiVirus	Trojan ( 0057d2181 )
Cyren	W64/Trojan2.QXAH
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Rozena.KA
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Khalesi.jaqc
BitDefender	Gen:Variant.Razy.872798
MicroWorld-eScan	Gen:Variant.Razy.872798
Ad-Aware	Gen:Variant.Razy.872798
Sophos	Troj/Cobalt-BQ
Comodo	TrojWare.Win32.Agent.nesfw@0
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.Win64.COBEACON.SUM
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Razy.872798
Emsisoft	Gen:Variant.Razy.872798 (B)
Jiangmin	Trojan.Khalesi.apzn
Webroot	W32.Trojan.Gen
Kingsoft	Win32.Troj.Khalesi.ja.(kcloud)
Microsoft	Trojan:Win32/NativeZone.C!dha
Arcabit	Trojan.Razy.DD515E
AegisLab	Trojan.Win32.Khalesi.4!c
GData	Gen:Variant.Razy.872798
McAfee	Trojan-FTRB!1C3B8AE594CB
MAX	malware (ai score=100)
Panda	Trj/CI.A
TrendMicro-HouseCall	Trojan.Win64.COBEACON.SUM
Rising	Backdoor.CobaltLoader!1.D6C6 (CLASSIC)
Ikarus	Trojan.Win64.Rozena
Fortinet	W32/Khalesi.JAQC!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan:Win32/NativeZone.C!dha?

Trojan:Win32/NativeZone.C!dha removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X