Categories: Malware

Heur.PonyStealer.smLfnOVwK8fi removal instruction

The Heur.PonyStealer.smLfnOVwK8fi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.PonyStealer.smLfnOVwK8fi virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Heur.PonyStealer.smLfnOVwK8fi?


File Info:
name: 944250B777085E1651A3.mlwpath: /opt/CAPEv2/storage/binaries/cc03c7c2f14f01db4070dabd66b57fbad3db38d47327e9c7b290458eaeb20c1bcrc32: 22E4FFA8md5: 944250b777085e1651a3c516519d4409sha1: 859ff81e56a0486d0f1277f98858d77cd7e4d0e9sha256: cc03c7c2f14f01db4070dabd66b57fbad3db38d47327e9c7b290458eaeb20c1bsha512: 6b6e5eb0ac8c802d363fe8375f34272ae5d10d41bfdc68f937bc28d4f5f2ac71289dadd86f9857e8c445c5815c3eb6a41728162876a8b1ebacfcfb651ffa4a9bssdeep: 6144:ebfGNlrzUUpR1MTuXp+gyelHCJt48veRd5GI/Wq3Acw:ebfMlrzUUX1MTuXp+gy0HCJG/Rd5GIKtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11D5412CAD72EB235D9B7027DDE1521115134C6053F3F46894E22A01BA7BB8F96BA2873sha3_384: ed765945a0688462d6bb77b8bc693d5938cfe93f1a1107a100d374605f6500b1415398555e28907b82b7cc8c134337ffep_bytes: 60be006041008dbe00b0feff5783cdfftimestamp: 2017-05-09 08:39:23
Version Info:
Translation: 0x0409 0x04b0Comments: FuronicsCompanyName: Utson   FileDescription: Furonics  LegalCopyright: Furonics  LegalTrademarks: Furonics  ProductName: Furonics FileVersion: 4.09.0008ProductVersion: 4.09.0008InternalName: PapsteselOriginalFilename: Papstesel.exe

Heur.PonyStealer.smLfnOVwK8fi also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zerber.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.smLfnOVwK8fi
FireEye	Generic.mg.944250b777085e16
McAfee	GenericRXAA-AA!34922EAE3CA2
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	Trojan.Gen.MBT
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Injector.DPID
APEX	Malicious
TrendMicro-HouseCall	TSPY_HPFAREIT.SM2
Kaspersky	VHO:Trojan.Win32.Mucc.gen
BitDefender	Gen:Heur.PonyStealer.smLfnOVwK8fi
NANO-Antivirus	Trojan.Win32.Zerber.eokcfb
Avast	InjectorX-gen [Trj]
Rising	Trojan.Occamy!8.F1CD (CLOUD)
Emsisoft	Gen:Heur.PonyStealer.smLfnOVwK8fi (B)
DrWeb	Trojan.Encoder.11198
VIPRE	Gen:Heur.PonyStealer.smLfnOVwK8fi
TrendMicro	TSPY_HPFAREIT.SM2
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Jiangmin	Trojan.Zerber.byw
Kingsoft	malware.kb.b.988
Arcabit	Trojan.PonyStealer.smLfnOVwK8fi
ZoneAlarm	VHO:Trojan.Win32.Mucc.gen
GData	Gen:Heur.PonyStealer.smLfnOVwK8fi
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/VBKrand.Gen
BitDefenderTheta	Gen:NN.ZevbaF.36802.smLfaOVwK8fi
MAX	malware (ai score=89)
VBA32	Hoax.Zerber
Malwarebytes	Generic.Malware/Suspicious
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.CJGS!tr
AVG	InjectorX-gen [Trj]
Cybereason	malicious.777085
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/PonyStealer.smLfnOVwK8fi