Trojan

Trojan:Win32/Vindor!atmnm removal

Malware Removal

The Trojan:Win32/Vindor!atmnm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Vindor!atmnm virus can do?

  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan:Win32/Vindor!atmnm?


File Info:

name: 62F9CC791206BD12D113.mlw
path: /opt/CAPEv2/storage/binaries/aa510209e249294634199c245797203182ef6d912d5f33c22d6b830d719fb0fb
crc32: BEF7A8F8
md5: 62f9cc791206bd12d113530995f22a6d
sha1: 4df2a57756816d1bb5a81f686b73367e13df79e0
sha256: aa510209e249294634199c245797203182ef6d912d5f33c22d6b830d719fb0fb
sha512: 6c4f902c473d005b22ef11518c8eb0b5e030adc3ffbcc8a1acf8fc12a4bbbf6119c76b316d45b4d22899501841380eb6b1d2512f61dd4217692db699b0fed94c
ssdeep: 12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOaHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZ6iE6EhE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E6F48E23F3D14837D1731A748C1BD2B9A826BF512D28758A7BE82D0D9F396913C392D6
sha3_384: 69896b55846765140090edf11a43f3d8aa4b8fb981f63964e8d877b2267e0cca385a9e680db79100dde7989fe3a4f78a
ep_bytes: 558bec83c4f053b8547f4800e8c7d3f7
timestamp: 2008-07-23 15:21:46

Version Info:

0: [No Data]

Trojan:Win32/Vindor!atmnm also known as:

BkavW32.Common.C06B11D8
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.62f9cc791206bd12
CAT-QuickHealTrojanSpy.Banker.LY8
SkyhighBehavesLike.Win32.Generic.bh
ALYacTrojan.Ranapama.AMY
Cylanceunsafe
ZillyaTrojan.Banker.Win32.55
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaMalware:Win32/km_2e2d74.None
K7GWTrojan ( 005a5d8b1 )
K7AntiVirusTrojan ( 005a5d8b1 )
ArcabitTrojan.Ranapama.AMY
BitDefenderThetaGen:NN.ZelphiF.36744.SGW@ayJW84gO
VirITTrojan.Win32.Banker5.ARIG
SymantecTrojan.FakeAV
ESET-NOD32a variant of Win32/TrojanDownloader.FakeAlert.VA
APEXMalicious
ClamAVWin.Trojan.Generic-9777994-0
KasperskyHEUR:Trojan-Dropper.Win32.Daws.gen
BitDefenderTrojan.Ranapama.AMY
NANO-AntivirusTrojan.Win32.Banker.oygn
ViRobotTrojan.Win32.Banker.766787
MicroWorld-eScanTrojan.Ranapama.AMY
AvastWin32:DropperX-gen [Drp]
TencentTrojan.Win32.Fakealert.b
TACHYONBanker/W32.DP-Pharm.728576
EmsisoftTrojan.Ranapama.AMY (B)
F-SecureTrojan.TR/Delf.865208
DrWebTrojan.PWS.Gamania.10780
VIPRETrojan.Ranapama.AMY
TrendMicroTROJ_FAKEAV.SMNA
Trapminesuspicious.low.ml.score
SophosMal/Banker-F
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.Banker.rxi
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Delf.865208
Antiy-AVLTrojan[Banker]/Win32.Banker
XcitiumTrojWare.Win32.TrojanDownloader.Banload.~AHI@7lad3
MicrosoftTrojan:Win32/Vindor!atmnm
SUPERAntiSpywareTrojan.Agent/Gen-BankSpy
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan.FakeAV.Q
VaristW32/Trojan.ORSB-8183
AhnLab-V3Trojan/Win32.Banker.R8976
Acronissuspicious
McAfeeFakeAV-DR
MAXmalware (ai score=81)
VBA32TrojanPSW.Gamania
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
ZonerTrojan.Win32.89386
TrendMicro-HouseCallTROJ_FAKEAV.SMNA
RisingDownloader.FakeAV!1.DAF2 (CLASSIC)
YandexTrojan.GenAsa!miVNfz8AUWI
IkarusTrojan.Ranapama
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/FAKEAV.Q!tr
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.756816
DeepInstinctMALICIOUS

How to remove Trojan:Win32/Vindor!atmnm?

Trojan:Win32/Vindor!atmnm removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment