Should I remove “Win32/Packed.NETGuard.A suspicious”?

Malware Removal

The Win32/Packed.NETGuard.A suspicious is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Review

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32/Packed.NETGuard.A suspicious virus can do?

  • Unconventionial language used in binary resources: Arabic (Yemen)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Packed.NETGuard.A suspicious?


File Info:

crc32: 34D5A817
md5: afda4bd796af9dec253ff19fa635fec8
name: Keemo20Proxies_protected.jpg
sha1: 08e21cef8253fa96ca20ff2fd9cd24750f78604d
sha256: e582c11d7b89550eb8d14c56e67359063d69d81b8a7f9046b1fb9533e1da6115
sha512: 75319087a0021df2ad567e420e562dbb8b59778f9d758fccb0210524e2aa3a4ba831b66c583cc8988d9ba8c685c2e201ace405b3f125cefc264816d03421b2e4
ssdeep: 49152:GIT0yrekpXo18KKp22X8ZqVYFFKXGfZIshvFy97U:otAPKwa1niiXn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2019
Assembly Version: 1.0.0.0
InternalName: Keemo Proxies.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Keemo Proxies
ProductVersion: 1.0.0.0
FileDescription: Keemo Proxies
OriginalFilename: Keemo Proxies.exe

Win32/Packed.NETGuard.A suspicious also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanTrojan.GenericKD.43396562
Qihoo-360HEUR/QVM05.1.19F1.Malware.Gen
McAfeeArtemis!AFDA4BD796AF
CylanceUnsafe
ZillyaDropper.FrauDrop.Win32.39687
SangforMalware
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.GenericKD.43396562
K7GWTrojan ( 0053a1121 )
K7AntiVirusTrojan ( 0053a1121 )
Invinceaheuristic
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.NETGuard.A suspicious
APEXMalicious
AvastFileRepMalware
AlibabaPacked:Win32/NETGuard.d7c2d4ed
AegisLabTrojan.Win32.Generic.4!c
Ad-AwareTrojan.GenericKD.43396562
EmsisoftTrojan.GenericKD.43396562 (B)
ComodoVirtool.Win32.CeeInject.AO@8b7evs
TrendMicroCoinminer.Win32.MALREP.THFBGBO
FortinetW32/Generic.AC.41A6BE
FireEyeGeneric.mg.afda4bd796af9dec
SophosMal/Generic-S
JiangminTrojanDropper.FrauDrop.anyz
WebrootW32.Trojan.Gen
Antiy-AVLTrojan[Dropper]/Win32.FrauDrop
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D2962DD2
MicrosoftTrojan:Win32/Tiggre!rfn
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Injector.R237861
Acronissuspicious
BitDefenderThetaGen:NN.ZelphiF.34130.cQ0@aGrYSaaO
ALYacTrojan.GenericKD.43396562
TACHYONTrojan/W32.DP-Inject.2131968
VBA32TScope.Trojan.Delf
MalwarebytesTrojan.Injector
PandaTrj/Genetic.gen
TrendMicro-HouseCallCoinminer.Win32.MALREP.THFBGBO
RisingTrojan.Pynamer!8.F0F8 (CLOUD)
YandexRiskware.NETGuard!
eGambitUnsafe.AI_Score_57%
GDataTrojan.GenericKD.43396562
AVGFileRepMalware
Cybereasonmalicious.f8253f
Paloaltogeneric.ml

How to remove Win32/Packed.NETGuard.A suspicious?

Win32/Packed.NETGuard.A suspicious removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment