Trojan:Win32/Znyonm removal instruction

The Trojan:Win32/Znyonm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Znyonm virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Znyonm?


File Info:
name: 791B0F888036C561C259.mlw
path: /opt/CAPEv2/storage/binaries/3790a1c1b4c4c46d88f2d350befa0745a0d09b78fe41b79118e7af89814db6aa
crc32: 6AA72829
md5: 791b0f888036c561c259a0df9bab9302
sha1: 137f461e1a51f3876cee1c2ddc10acde825e91b4
sha256: 3790a1c1b4c4c46d88f2d350befa0745a0d09b78fe41b79118e7af89814db6aa
sha512: cec56160c1c40030ac88839e434c07ec4b288f222a757e1fbbe2a8cdd13c793201d5f47a043500ad00d8e5b9a9047e246cfd4098639e225d3e225caf87727389
ssdeep: 196608:VJbD8ATjbLwGsg1RYBJjNfsZo8vUNiFqzcZXAtB4XESmQW3pSz1C+gVG2V3pZlQ:LUkbUGs4KyoYwc1AtB4UkW0z1j
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T110A623223187C427C96D06B924BDDB2F426A7E36473614DB72EC7F6B18F19C12332A56
sha3_384: 3c4903a4fc7ac34074495b3e3f71b74619aff40655ebe652d8796542a5a0b36b7ba5d3dc4b41710d215e1be518286f4b
ep_bytes: 558bec837d0c017505e860050000ff75
timestamp: 2023-01-17 10:51:54

Version Info:
CompanyName: Caphyon LTD
FileDescription: Various custom actions
FileVersion: 20.2.1.0
InternalName: AICustAct.dll
LegalCopyright: (c) Caphyon LTD. All rights reserved.
OriginalFilename: AICustAct.dll
ProductName: Advanced Installer
ProductVersion: 20.2.1.0
Translation: 0x0409 0x04b0

Trojan:Win32/Znyonm also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.Agent.GFTB
FireEye	Trojan.Agent.GFTB
Skyhigh	BehavesLike.Win32.Dropper.tc
McAfee	Artemis!791B0F888036
Malwarebytes	Trojan.Crypt
Arcabit	Trojan.Agent.GFTB
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
BitDefender	Trojan.Agent.GFTB
Avast	Win32:BankerX-gen [Trj]
Emsisoft	Trojan.Agent.GFTB (B)
F-Secure	Heuristic.HEUR/AGEN.1328223
VIPRE	Trojan.Agent.GFTB
Sophos	Mal/Generic-S
MAX	malware (ai score=83)
Antiy-AVL	Trojan[Spy]/Win32.Ousaban
Kingsoft	Win32.Troj.Undef.a
Microsoft	Trojan:Win32/Znyonm
GData	Trojan.Agent.GFTB
ALYac	Trojan.Agent.GFTB
Cylance	unsafe
Panda	Trj/Chgt.AD
Rising	Trojan.Znyonm!8.18A3A (CLOUD)
Ikarus	Trojan.Agent
Fortinet	W32/PossibleThreat
AVG	Win32:BankerX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Znyonm?

Trojan:Win32/Znyonm removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X