Trojan

Trojan:Win32/Tnega.SM!MTB information

Malware Removal

The Trojan:Win32/Tnega.SM!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Tnega.SM!MTB virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/Tnega.SM!MTB?


File Info:

crc32: 6CDD860B
md5: 47101562f8b53fb5b5c1dcd9ae082063
name: 47101562F8B53FB5B5C1DCD9AE082063.mlw
sha1: b2335f40e456224d244632a0bdaca5a29ad6fc30
sha256: 5ca86da4e23c7a36d807aa52696621ae872bcea11c5ac574a70c80de0188670d
sha512: 2a7572ff48fad74b575ea224f4c8bcac603a70f8cffe6e796eeebe45f3b6850b6fa4da7bf23166828d093cb5927da1a3d1b64a7e9ab0c0c963f54d7a680235f9
ssdeep: 24576:W70Jm/jKL7a+JcGqqC5BTdx2wk/Ctl3S4764zS:WXbVJthS476V
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Tnega.SM!MTB also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.BypassUAC.4!c
Elasticmalicious (high confidence)
DrWebBackDoor.Remcos.324
CynetMalicious (score: 99)
ALYacBackdoor.Remcos.A
SangforTrojan.Win32.BypassUAC.gen
AlibabaTrojanDownloader:Win32/Tnega.e466e60e
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.0e4562
CyrenW32/Delf.TITQ-7304
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrojanDownloader.Delf.DGG
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.BypassUAC.gen
BitDefenderTrojan.GenericKD.46660679
MicroWorld-eScanTrojan.GenericKD.46660679
TencentWin32.Trojan.Bypassuac.Pavg
Ad-AwareTrojan.GenericKD.46660679
SophosMal/Generic-S + Mal/Agent-ATI
BitDefenderThetaGen:NN.ZelphiCO.34050.6KX@aWf3hrhi
McAfee-GW-EditionPWS-FCVN!47101562F8B5
FireEyeGeneric.mg.47101562f8b53fb5
EmsisoftTrojan.GenericKD.46660679 (B)
WebrootW32.Trojan.Gen
AviraTR/Dldr.Delf.tbkue
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Tnega.SM!MTB
ZoneAlarmHEUR:Trojan.Win32.BypassUAC.gen
GDataTrojan.GenericKD.46660679
AhnLab-V3Trojan/Win.Tnega.C4562199
McAfeePWS-FCVN!47101562F8B5
MAXmalware (ai score=84)
VBA32TScope.Trojan.Delf
MalwarebytesTrojan.MalPack.DLF
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002H07GL21
IkarusTrojan.Inject
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.DPIE!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan:Win32/Tnega.SM!MTB?

Trojan:Win32/Tnega.SM!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment