W32/Neshta-E removal guide

The W32/Neshta-E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What W32/Neshta-E virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine W32/Neshta-E?


File Info:
crc32: 82057528
md5: 0afa4b99644e30f2642ad3f7d69e30c0
name: 0AFA4B99644E30F2642AD3F7D69E30C0.mlw
sha1: c593ee4e7acdadc8557281c5f91ded99e133cb7a
sha256: 15162dc86f8992302e7fd6acc5a27bfff28b7e77270049de63ed989caee9dac8
sha512: 6e736be243501fd8899fa4b6f7283dd85c3fe13685509df3aa89778b9eb62323597d1ddd439737e4524fc26bf51467454a34ea042d4b8a34ca7005b147e7509f
ssdeep: 12288:Ee15A4PUiqycsBEs5dxXbgMgFeoG3h/noc9rrsAK6U2gsHr:Ee15A0UiqycsBEs5ddyFeoG360UAK6Hh
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

W32/Neshta-E also known as:

Lionic	Trojan.Win32.Neshta.4!c
Elastic	malicious (high confidence)
CAT-QuickHeal	W64.Neshta.M10
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Win32/Neshta.b173a69b
Cybereason	malicious.e7acda
Cyren	W64/Trojan.PZLC-7122
Symantec	Trojan.Gen.6
Zoner	Virus.Win32.19514
Avast	Win32:Crypt-SKC [Trj]
ClamAV	Win.Virus.Neshta-7101689-0
Sophos	W32/Neshta-E
VIPRE	Virus.Win32.Neshta.Gen.3 (fs)
TrendMicro	TROJ_GEN.R002C0PG621
McAfee-GW-Edition	W32/HLLP.41472
FireEye	Generic.mg.0afa4b99644e30f2
Avira	W32/Delf.I
Antiy-AVL	Trojan/Generic.ASBOL.C61B
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!0AFA4B99644E
TrendMicro-HouseCall	TROJ_GEN.R002C0PG621
Ikarus	Win32.Delf
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Neshta.E
AVG	Win32:Crypt-SKC [Trj]

How to remove W32/Neshta-E?

W32/Neshta-E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X