Spy

Win32/Spy.Banker.AENN information

Malware Removal

The Win32/Spy.Banker.AENN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32/Spy.Banker.AENN virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Win32/Spy.Banker.AENN?



File Info:

name: EC2CF26A8118FCE3DF4E.mlw
path: /opt/CAPEv2/storage/binaries/15fe769f9fd063077318401e3ca85c5fe07caf310e4af08e6ed0953c74098a03
crc32: 9EE7FBA4
md5: ec2cf26a8118fce3df4e2f2da4abcbb0
sha1: b7d21de4e5975208f8c85d689f3586f378500b89
sha256: 15fe769f9fd063077318401e3ca85c5fe07caf310e4af08e6ed0953c74098a03
sha512: 4355b1391d164a85f56d3743e600eb573b1e6505c97fe9f6ec17ba9c404621f7790843004f9d2d2d7ba04e40532ccfcecba54da076f4d380ba7b9b5092ab0c5e
ssdeep: 49152:8ixyJ5ogBXSjhx4QSjl9502MkxX0HCf1OFU1rhwFrTjTAdhiqfhifAE:zxyJ6zhoHxX1f9xhQXwXEf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16A166E12B344713EC0AB1E3A9977EA989D3F7B712A16CC1757F40D4C8F35A406A3A61B
sha3_384: b206d10f3ea0bd392e6dadc5e2f210ef644c965b653b027aaa40c7cf370f9192b9f6da3a81332261b9d2c7933251ed69
ep_bytes: 558bec83c4f0b8e4117900e82c53c7ff
timestamp: 2021-12-28 23:36:53


Version Info:

CompanyName: HP Inc.
FileDescription: HP Inc.
FileVersion: 1.3.0.1
InternalName: CCUpdate
LegalCopyright: Copyright (c) 2017-2018 HP Development Company, L.P.
LegalTrademarks: Copyright (c) 2017-2018 HP Development Company, L.P.
OriginalFilename: PrintScanDoctorService.exe
ProgramID: PrintScanDoctorService
ProductName: PrintScanDoctorService
ProductVersion: 1.3.0.1
Translation: 0x0409 0x04e4

Win32/Spy.Banker.AENN also known as:

BkavW32.AIDetect.malware2
MicroWorld-eScanTrojan.GenericKD.38743991
FireEyeGeneric.mg.ec2cf26a8118fce3
ALYacTrojan.GenericKD.38743991
CylanceUnsafe
ZillyaTrojan.Banker.Win32.137119
SangforSpyware.Win32.Agent.Vjk6
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/Trojan.CVXP-8003
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Banker.AENN
KasperskyHEUR:Trojan-Banker.Win32.BestaFera.gen
BitDefenderTrojan.GenericKD.38743991
TencentWin32.Trojan-spy.Banker.Akoy
Ad-AwareTrojan.GenericKD.38743991
EmsisoftTrojan.GenericKD.38743991 (B)
ComodoMalware@#19h479jnmkfk
VIPRETrojan.GenericKD.38743991
TrendMicroTrojan.Win32.SABSIK.CJ
McAfee-GW-EditionBehavesLike.Win32.Injector.rh
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
GDataTrojan.GenericKD.38743991
JiangminTrojan.Banker.BestaFera.jaf
ZoneAlarmHEUR:Trojan-Banker.Win32.BestaFera.gen
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
CynetMalicious (score: 100)
McAfeeArtemis!EC2CF26A8118
MAXmalware (ai score=86)
MalwarebytesTrojan.Banker
TrendMicro-HouseCallTrojan.Win32.SABSIK.CJ
RisingTrojan.Generic@AI.96 (RDML:Nu+/3FsLAj1ynCdrFASESA)
IkarusTrojan-Spy.Agent
MaxSecureTrojan.Malware.139078497.susgen
FortinetMalicious_Behavior.SB

How to remove Win32/Spy.Banker.AENN?

Win32/Spy.Banker.AENN removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment