Trojan:Win32/Znyonm removal

The Trojan:Win32/Znyonm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Znyonm virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Znyonm?


File Info:
name: 97A3AF37647E57D40BC1.mlw
path: /opt/CAPEv2/storage/binaries/ac75281a34dbfcc7eeaedcb9dc3ff3c33e7fd43b56d77b2a6568fc4bb7e08b70
crc32: FAB81C05
md5: 97a3af37647e57d40bc154d6a6a30cb4
sha1: 06398a04f92f2e0e02f25f4f2ef09487e42591aa
sha256: ac75281a34dbfcc7eeaedcb9dc3ff3c33e7fd43b56d77b2a6568fc4bb7e08b70
sha512: caca60a56f382aa1337e6e06d2ca2c310b7ac21a9503a63d6eab4f6cbbdd9ad8c98d4086c8a249a694592c3620ac4a43ce0d52807f94dd72eec000be33d748f5
ssdeep: 12288:WHKjm8awCt+cLHOLggoRtVe0NkdZXzDNiZMFVYJiEIIzD/Su:Wqjm84+cLHOsVTeKkdZjD0ZMFSJiEHl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T100159D33F18180F2C3551A3115B6673AAE75AB0A0A70CE83DBD4DE7DAD722929B3711D
sha3_384: 8656ff14ddc5fb435e3f8b4911531013a84a9c4b3f19eef35aa4a0917b26d4e299a464cf15d6ec6e61abdf8149fd8cc1
ep_bytes: 558bec6aff68986d4b00681cf3480064
timestamp: 2023-11-03 13:02:57

Version Info:
0: [No Data]

Trojan:Win32/Znyonm also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Multi.Generic.muUy
FireEye	Generic.mg.97a3af37647e57d4
Skyhigh	BehavesLike.Win32.Dropper.ch
McAfee	Artemis!97A3AF37647E
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.4f92f2
BitDefenderTheta	Gen:NN.ZexaF.36792.3qW@aqfKDihb
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/FlyStudio.HackTool.C potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:AKN996wspBCJhe32rWnVow)
Sophos	Mal/Generic-S
Trapmine	malicious.high.ml.score
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Antavmu.eiw
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.927
Microsoft	Trojan:Win32/Znyonm
Xcitium	Worm.Win32.Dropper.RA@1qraug
GData	Win32.Trojan.PSE.1GH2WXA
Varist	W32/S-480dd005!Eldorado
DeepInstinct	MALICIOUS
Cylance	unsafe
Ikarus	Trojan.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.ELG!tr.pws
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]

How to remove Trojan:Win32/Znyonm?

Trojan:Win32/Znyonm removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X