Malware

Heur.MSIL.Gaborone.2 information

Malware Removal

The Heur.MSIL.Gaborone.2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.MSIL.Gaborone.2 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Heur.MSIL.Gaborone.2?


File Info:

crc32: 737D437F
md5: 29c9ae36a3571136105be426f1a99a3f
name: ebaniydenyok.exe
sha1: 62c1ac613aebee2d2af81efb41798b2957733494
sha256: b5cc0ce232c39acba2abb254169c68ec55fc50a11aa41b8b32a4831ab5fd857b
sha512: a36c77756df40ad96761acf4130cd69c8c40182e6da5735dbbfb4a70924f9682c6e9cc75a6b5a75d9bffb632012e32e1ad9a77ffac1d289120a9ecba20491510
ssdeep: 3072:gYKWpbwau6fVJqoD2RK/kr8eK+LVbrvu5biicSXv9ON:g9ybwgdJqoDqHK+LVbrvYiix
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Cullinan.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Cullinan.exe

Heur.MSIL.Gaborone.2 also known as:

DrWebBackDoor.SpyBotNET.10
MicroWorld-eScanGen:Heur.MSIL.Gaborone.2
FireEyeGeneric.mg.29c9ae36a3571136
CAT-QuickHealTrojan.Generic
McAfeeRDN/Generic PWS.y
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderGen:Heur.MSIL.Gaborone.2
K7GWSpyware ( 0054a0841 )
Cybereasonmalicious.13aebe
TrendMicroTrojan.MSIL.MALREP.THDBFBO
BitDefenderThetaGen:NN.ZemsilF.34108.km0@ays4tYp
APEXMalicious
Paloaltogeneric.ml
GDataGen:Heur.MSIL.Gaborone.2
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:MSIL/Generic.f8d643ab
AegisLabTrojan.Win32.Generic.4!c
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Trojan.Generic.Htwj
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1106066
McAfee-GW-EditionBehavesLike.Win32.Trojan.ch
Trapminemalicious.high.ml.score
EmsisoftGen:Heur.MSIL.Gaborone.2 (B)
IkarusTrojan.MSIL.Spy
AviraHEUR/AGEN.1106066
Antiy-AVLTrojan/Win32.Wacatac
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.MSIL.Gaborone.2
ZoneAlarmHEUR:Trojan.Win32.Generic
AhnLab-V3Malware/Win32.RL_Generic.C4053734
Acronissuspicious
ALYacGen:Heur.MSIL.Gaborone.2
MAXmalware (ai score=84)
Ad-AwareGen:Heur.MSIL.Gaborone.2
MalwarebytesSpyware.CryptBot
ESET-NOD32a variant of MSIL/Spy.Agent.BYF
TrendMicro-HouseCallTrojan.MSIL.MALREP.THDBFBO
RisingSpyware.Agent!8.C6 (TFE:dGZlOg0Vh+6731nPvA)
SentinelOneDFI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Generic.BYF!tr
WebrootW32.Malware.Gen
AVGWin32:TrojanX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.fc8

How to remove Heur.MSIL.Gaborone.2?

Heur.MSIL.Gaborone.2 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment