Malware

Win32:Portscan-E [Tool] removal tips

Malware Removal

The Win32:Portscan-E [Tool] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:Portscan-E [Tool] virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32:Portscan-E [Tool]?


File Info:

crc32: D151E7B9
md5: 1dbd5d246a6be3ff85ddd32c2f85a7b7
name: 1DBD5D246A6BE3FF85DDD32C2F85A7B7.mlw
sha1: 32d0a511c871d3eebef53f6b81fc98d20919ed4f
sha256: 9c27d8c3f68eecfbd210343e6e50a7a4cc861902dd0a4e65ee80c4463ebb1dbf
sha512: 046e36cbc955ac89208a88a5559aa7a0919b8b670a365d6225d03f02c538005e9c2b3c18c468c66dd099bbc64ff959af7f527750797913cbfa96d2e79b643f54
ssdeep: 768:jdgEBSg0ylb/G1qm5S6LeWnENCz5/Gio2+ebavyUnAA:jdOg5lbGkm5VL1ENwZVo2+dy+AA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 2006 x738bx5b9dx5251
InternalName: ScanPort
FileVersion: 1.2 Build 2006.3.20
ProductName: ScanPortx7aefx53e3x626bx63cfx5de5x5177
ProductVersion: 1, 0, 0, 0
FileDescription: ScanPortx7aefx53e3x626bx63cfx5de5x5177 V1.2
OriginalFilename: ScanPort.exe
Translation: 0x0804 0x04b0

Win32:Portscan-E [Tool] also known as:

BkavW32.AIDetectVM.malware2
K7AntiVirusUnwanted-Program ( 004d38111 )
Elasticmalicious (high confidence)
ClamAVWin.Dropper.Agent-117890
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.GenericKD.34396787
ZillyaDownloader.Genome.Win32.65663
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaNetTool:Win32/Portscan.a3ec3be7
K7GWUnwanted-Program ( 004d38111 )
Cybereasonmalicious.1c871d
TrendMicroTROJ_GEN.R005C0PHH20
CyrenW32/new-malware!Maximus
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/NetTool.Portscan.NAD potentially unsafe
APEXMalicious
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKD.34396787
NANO-AntivirusTrojan.Win32.ULPM.cwxutv
MicroWorld-eScanTrojan.GenericKD.34396787
Ad-AwareTrojan.GenericKD.34396787
BitDefenderThetaGen:NN.ZexaF.34216.iqKfaqunIBab
VIPRETrojan.Win32.Generic!BT
InvinceaGeneric PUA DC (PUA)
FireEyeGeneric.mg.1dbd5d246a6be3ff
SophosGeneric PUA DC (PUA)
SentinelOneDFI – Suspicious PE
JiangminExploit.Multi.az
eGambitUnsafe.AI_Score_85%
MicrosoftPUA:Win32/Vigua.A
ArcabitTrojan.Generic.D20CDA73
AegisLabTrojan.Win32.Malicious.4!c
GDataTrojan.GenericKD.34396787
McAfeeArtemis!1DBD5D246A6B
MAXmalware (ai score=84)
VBA32BScope.Exploit.CVE-2020-0601
TrendMicro-HouseCallTROJ_GEN.R005C0PHH20
IkarusTrojan-Downloader.Win32.Hanlo
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/NetTool_Portscan
AVGWin32:Portscan-E [Tool]
PandaTrj/CI.A

How to remove Win32:Portscan-E [Tool]?

Win32:Portscan-E [Tool] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment