Malware

Heur.Mint.Titirez.FmGfp4ZDUAPi removal

Malware Removal

The Heur.Mint.Titirez.FmGfp4ZDUAPi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Mint.Titirez.FmGfp4ZDUAPi virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Spanish
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Steals private information from local Internet browsers
  • Collects information about installed applications
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed instant messenger clients
  • Harvests information related to installed mail clients
  • Collects information to fingerprint the system

Related domains:

cryptoshop.ac.ug
ip-api.com

How to determine Heur.Mint.Titirez.FmGfp4ZDUAPi?


File Info:

crc32: A6DB3F36
md5: a99b7c2b381356c30debc781fcb6502c
name: A99B7C2B381356C30DEBC781FCB6502C.mlw
sha1: 37acd2528e34f7d456c289f4b542f498d275bb89
sha256: 5b31db128d897e3356873f1e4d9b9649b24927d242e3c66dfb5e8c84d7216322
sha512: b99bdd97cd49dd95ce4c77d788c0203d49c895dba699e9b4e79520ba40bc7035fc8fead7454e8b5b3100bad7a4cc61ac895a910688dfb7091e4185e4a460ec88
ssdeep: 12288:6S5ESZhF6+ojUB54hoBlNbS5Sy5Nh+sSNNdomxrx8WuNUa:RTPcFxkNaSy8sIdxbuNU
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Heur.Mint.Titirez.FmGfp4ZDUAPi also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Heur.Mint.Titirez.FmGfp4ZDUAPi
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.3b0c2a6f
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.b38135
SymantecInfostealer.Rultazo
ESET-NOD32a variant of Win32/Kryptik.GQED
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Mint.Titirez.FmGfp4ZDUAPi
NANO-AntivirusTrojan.Win32.Chapak.fnpsvz
ViRobotTrojan.Win32.GandCrab.Gen.B
SUPERAntiSpywareTrojan.Agent/Gen-MalPack
MicroWorld-eScanGen:Heur.Mint.Titirez.FmGfp4ZDUAPi
TencentWin32.Trojan.Generic.Lohv
Ad-AwareGen:Heur.Mint.Titirez.FmGfp4ZDUAPi
SophosMal/Generic-S + Mal/GandCrab-G
ComodoTrojWare.Win32.Ransom.GandCrab.AV@838jci
BitDefenderThetaGen:NN.ZexaF.34770.FmGfa4ZDUAPi
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojan.Win32.SODINOK.SM.hp
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
FireEyeGeneric.mg.a99b7c2b381356c3
EmsisoftGen:Heur.Mint.Titirez.FmGfp4ZDUAPi (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Chapak.bcs
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1102650
Antiy-AVLTrojan/Generic.ASMalwS.2AB3C6E
MicrosoftBackdoor:Win32/Predator.J!rfn
ArcabitTrojan.Mint.Titirez.FmGfp4ZDUAPi
AegisLabTrojan.Win32.Chapak.4!c
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Heur.Mint.Titirez.FmGfp4ZDUAPi
AhnLab-V3Trojan/Win32.Gandcrab.R256891
Acronissuspicious
McAfeeArtemis!A99B7C2B3813
MAXmalware (ai score=86)
VBA32BScope.Trojan.Azden
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.Win32.SODINOK.SM.hp
RisingTrojan.Kryptik!1.B606 (CLASSIC)
YandexTrojan.Chapak!PPf/3SdUPlI
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GandCrab_V5_2!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.CeeInject.HgIASOgA

How to remove Heur.Mint.Titirez.FmGfp4ZDUAPi?

Heur.Mint.Titirez.FmGfp4ZDUAPi removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment