Trojan

Trojan:Win32/Phonzy.A!ml removal

Malware Removal

The Trojan:Win32/Phonzy.A!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Phonzy.A!ml virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content

How to determine Trojan:Win32/Phonzy.A!ml?



File Info:

name: 30537FF2A6AC7FD5E331.mlw
path: /opt/CAPEv2/storage/binaries/11fbd79c9e27d84e6796971e78534ef6311e7ec50a6d4bf31ec1a8fbb8f432ca
crc32: 4A78F291
md5: 30537ff2a6ac7fd5e331ef537cc2f12b
sha1: b269da62acdad833d97af949c096fa2b624e6b87
sha256: 11fbd79c9e27d84e6796971e78534ef6311e7ec50a6d4bf31ec1a8fbb8f432ca
sha512: 8b4543a5ce963650731a9a3cfddb5228c5d9c467566c47af1a60e6d6b38600ccb9edf4c681f97754927be494358584e83e314a46a9bec76d8d1581bcaf65519c
ssdeep: 12288:dmO86G7aKfBxBDBOBWBsBAyUZ2Gm2qaz/qR/aT1:dZK2KHmaz/qRST1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T186B41B23AA90210DD51349728EF1E7BD992A7C351445DD0BB389FE0919B25C3AEFA31F
sha3_384: 5ab85db26a0d4dafbfd205be5a57a198bcf9030245647cec439bcdd48fe08672058ee25db80186e50c411ebac4601551
ep_bytes: 6874464000e8f0ffffff000040000000
timestamp: 2021-10-25 14:58:59


Version Info:

Translation: 0x0409 0x04b0
CompanyName: SterJo Software
FileDescription: Reveal all passwords stored by Google Chrome
LegalCopyright: Copyright © SterJo Software
ProductName: SterJo Chrome Passwords
FileVersion: 2.01
ProductVersion: 2.01
InternalName: ChromePasswords
OriginalFilename: ChromePasswords.exe

Trojan:Win32/Phonzy.A!ml also known as:

BkavW32.Common.EE5B2374
LionicRiskware.Win32.SterJoPassView.1!c
MicroWorld-eScanTrojan.GenericKD.48149735
FireEyeTrojan.GenericKD.48149735
CAT-QuickHealPUA.UwamsonVMF.S22457089
SkyhighArtemis!Trojan
ALYacTrojan.GenericKD.48149735
Cylanceunsafe
K7AntiVirusRiskware ( 00584baa1 )
AlibabaTrojanSpy:Application/Generic.b24521a6
K7GWRiskware ( 00584baa1 )
ArcabitTrojan.Generic.D2DEB4E7
SymantecPUA.Gen.2
CynetMalicious (score: 99)
Kasperskynot-a-virus:PSWTool.Win32.SterJoPassView.cz
BitDefenderTrojan.GenericKD.48149735
AvastWin32:MiscX-gen [PUP]
EmsisoftTrojan.GenericKD.48149735 (B)
F-SecureTrojan.TR/Spy.Gen
BitDefenderThetaAI:Packer.9EDF279D21
TrendMicroTROJ_GEN.R002C0XAJ24
SophosPassword Finder (PUA)
JiangminPSWTool.SterJoPassView.k
WebrootW32.Riskware.Passwordrecoverysu
GoogleDetected
AviraTR/Spy.Gen
Kingsoftwin32.pswtroj.undef.a
MicrosoftTrojan:Win32/Phonzy.A!ml
ZoneAlarmnot-a-virus:PSWTool.Win32.SterJoPassView.cz
GDataTrojan.GenericKD.48149735
VaristW32/ABRisk.BCHM-0968
McAfeeGenericRXAA-AA!30537FF2A6AC
MAXmalware (ai score=89)
MalwarebytesGeneric.Malware/Suspicious
PandaHackingTool/PassView
TrendMicro-HouseCallTROJ_GEN.R002C0XAJ24
RisingHacktool.SterJoPassView!8.13C7E (CLOUD)
YandexTrojanSpy.Agent!yWu/inXJeoY
IkarusTrojan.Spy
MaxSecureTrojan.Malware.140063347.susgen
FortinetW32/PossibleThreat
AVGWin32:MiscX-gen [PUP]
DeepInstinctMALICIOUS

How to remove Trojan:Win32/Phonzy.A!ml?

Trojan:Win32/Phonzy.A!ml removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment