Should I remove “Heur.Trickbot.2”?

The Heur.Trickbot.2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Heur.Trickbot.2 virus can do?

Authenticode signature is invalid

How to determine Heur.Trickbot.2?


File Info:
name: BC23A3EE4B585776F0D2.mlw
path: /opt/CAPEv2/storage/binaries/2ae9c05304211febe8fb2f5258dc9267c679a28a6f6d78abbdbf3adc33eb5fc5
crc32: CD8A873E
md5: bc23a3ee4b585776f0d2e813a6f33585
sha1: cc42b18b7f4e5e1adbc63fe02402b8d07d1cfd75
sha256: 2ae9c05304211febe8fb2f5258dc9267c679a28a6f6d78abbdbf3adc33eb5fc5
sha512: 641a7c0cdf06e8f8321723237cef872067c27285503aa2d9111ccf0de40a6d3d1ca68b3e03215d9467025d5324686507b8a65cd15c5692d8a081ecfc1b5ecbe6
ssdeep: 6144:33qVRM6WLCPu2IDVfS9ogA3CauAeQr3ul0yVgHkJIo:UqHcuN69hmB3eQr3ul0Ag0d
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T126A465893014E936E318C9751835DDDDAD293DA6BD03382F3A97B3AF1BB22F19642543
sha3_384: e99f0bd90d230bb8fcbe9344069784920085d0768401a7369c5a5ca5a22f4ed92e3c91193326329cd71197eafd0ac175
ep_bytes: 33c0c300000000000d0a0d0a54686973
timestamp: 2008-01-01 08:55:28

Version Info:
0: [No Data]

Heur.Trickbot.2 also known as:

Lionic	Trojan.Win32.Trickbot.4!c
MicroWorld-eScan	Gen:Heur.Trickbot.2
FireEye	Gen:Heur.Trickbot.2
ALYac	Gen:Heur.Trickbot.2
Cylance	Unsafe
Alibaba	Trojan:Win32/SuspPack.b03ca32e
Cyren	W32/SuspPack.AA.gen!Eldorado
TrendMicro-HouseCall	TROJ_GEN.R03BH09KP21
BitDefender	Gen:Heur.Trickbot.2
Ad-Aware	Gen:Heur.Trickbot.2
Emsisoft	Gen:Heur.Trickbot.2 (B)
McAfee-GW-Edition	BehavesLike.Win64.BadFile.gm
Sophos	ML/PE-A
Ikarus	Trojan.Crypt
GData	Gen:Heur.Trickbot.2
Avira	TR/Crypt.XPACK.Gen
Gridinsoft	Ransom.Win64.TrickBot.sa
Arcabit	Trojan.Trickbot.2
Cynet	Malicious (score: 100)
McAfee	Artemis!BC23A3EE4B58
MAX	malware (ai score=83)
APEX	Malicious
Rising	Trojan.Generic@ML.100 (RDMK:o3mWcVYxHak40IP6nvkaSA)
Fortinet	W32/PossibleThreat

How to remove Heur.Trickbot.2?

Heur.Trickbot.2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X