Malware

Win32:Fosniw-C [Trj] removal guide

Malware Removal

The Win32:Fosniw-C [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32:Fosniw-C [Trj] virus can do?

  • Authenticode signature is invalid

How to determine Win32:Fosniw-C [Trj]?



File Info:

name: AD00C26FF257414244BC.mlw
path: /opt/CAPEv2/storage/binaries/ef2fc4e501cf95a2f6a39835e38d8bcbecef78f9cd8e5411af6545767eadd0b5
crc32: 33ADB924
md5: ad00c26ff257414244bc05045a087da6
sha1: 263ad85272a1872306dcc598fb2e0985cefdea83
sha256: ef2fc4e501cf95a2f6a39835e38d8bcbecef78f9cd8e5411af6545767eadd0b5
sha512: 5d5e3688ff2f225ae225a37d24c2352d5723c3eae94278848e8b8f77530b69beff5dabc80c1bdcdd614162af0dd1f23dafc2b0701f7830178a0ef3390a132e6f
ssdeep: 6144:yVh/4tdZnSXrK34kcuOGQyNFHXB4kJgf2:yVhgtd1Kqyp2FHXB9i+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14844398236A0CA31D47250B5459BD7734D6F3C715E19BA87FBC50A7CAA387F0AE2134A
sha3_384: 61f7f3e651cba1879e76709e43387f376e77676a90ed3367330d7a8241331d73995751cf5479c51306f33b8ca4cbf032
ep_bytes: e8cdac0000e978feffff5064ff350000
timestamp: 2010-12-27 12:15:47


Version Info:

0: [No Data]

Win32:Fosniw-C [Trj] also known as:

BkavW32.Common.75DF740C
LionicTrojan.Win32.Generic.llHj
DrWebTrojan.DownLoader3.57249
MicroWorld-eScanGen:Heur.Naffy.1
SkyhighBehavesLike.Win32.ZBot.dh
McAfeePWS-Zbot.gen.asm
MalwarebytesMalware.AI.3989025513
ZillyaDownloader.Fosniw.Win32.8753
SangforTrojan.Win32.Save.a
AlibabaTrojanDownloader:Win32/Fosniw.4abdf54d
BitDefenderThetaAI:Packer.64F4B7861E
SymantecW32.Palevo
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDownloader.Fosniw.AK
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Naffy.1
NANO-AntivirusTrojan.Win32.Fosniw.bzybcf
AvastWin32:Fosniw-C [Trj]
TencentWin32.Trojan.Generic.Gwnw
EmsisoftGen:Heur.Naffy.1 (B)
F-SecureTrojan.TR/Dldr.Fosniw.BA
BaiduWin32.Trojan-Downloader.Fosniw.a
VIPREGen:Heur.Naffy.1
FireEyeGeneric.mg.ad00c26ff2574142
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
MAXmalware (ai score=100)
JiangminTrojan.Generic.adsxj
GoogleDetected
AviraTR/Dldr.Fosniw.BA
VaristW32/Fosniw.B.gen!Eldorado
Antiy-AVLTrojan[Downloader]/Win32.Fosniw.au
Kingsoftmalware.kb.a.999
MicrosoftTrojanDownloader:Win32/Fosniw.B
XcitiumApplicUnwnt.Win32.AdWare.Agent.cljb@4f3c9v
ArcabitTrojan.Naffy.1
ViRobotTrojan.Win32.Fosniw.Gen
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan.PSE.G3LDFB
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Winsoft15.Gen
VBA32BScope.Trojan.Downloader
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.DL.Win32.DownLoad.mt (CLASSIC)
YandexTrojan.GenAsa!oeZ4v9WYiXw
IkarusGen.Variant.Cudos
MaxSecureTrojan.Malware.2588.susgen
FortinetW32/Dloader.ANW!tr
AVGWin32:Fosniw-C [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan[downloader]:Win/Fosniw.AA

How to remove Win32:Fosniw-C [Trj]?

Win32:Fosniw-C [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment