Malware

How to remove “Heur.Variadic.A.382.1”?

Malware Removal

The Heur.Variadic.A.382.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Variadic.A.382.1 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Serbian
  • The binary likely contains encrypted or compressed data.
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

telete.in
apps.identrust.com

How to determine Heur.Variadic.A.382.1?


File Info:

crc32: 9E5B9A34
md5: 7c4d3214e430a674c7f2785109848139
name: 7C4D3214E430A674C7F2785109848139.mlw
sha1: 6d69f85d8941d805a4c45cd23471698dc3db01f6
sha256: 7c1bd660afc5d0cd05d49fc62c9827c8e6f87ddf930a3a95c35f069b6bfe71c3
sha512: a00779cfe4b7940dfe497bcc7ca5968fcfed8c411aa4cc5a0707f05da7bccf2d9de4155bc1038ef5d6eaf709de902d2f43c89088d272a936f2a243afceb9debb
ssdeep: 12288:148rrNDG73RRm5iQF0/KRGtl/wA3a/Laq:++DG73RRm5iQCU2ofzaq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: voygcuadage.exe
FileVersion: 1.6.38.44
Copyright: Copyrighz (C) 2020, wodkagudy
ProductVersions: 1.16.44
Translation: 0x0273 0x011d

Heur.Variadic.A.382.1 also known as:

K7AntiVirusTrojan ( 0057f6511 )
LionicTrojan.Win32.Racealer.i!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader40.39632
CynetMalicious (score: 100)
CAT-QuickHealTrojan.IgenericRI.S21565548
ALYacGen:Heur.Variadic.A.382.1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0057f6511 )
CyrenW32/Qbot.FK.gen!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.HLSC
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Malware.Generic-9879225-0
KasperskyHEUR:Trojan-PSW.Win32.Racealer.gen
BitDefenderGen:Heur.Variadic.A.382.1
NANO-AntivirusTrojan.Win32.Racealer.ixtpxu
MicroWorld-eScanGen:Heur.Variadic.A.382.1
Ad-AwareGen:Heur.Variadic.A.382.1
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R067C0DGM21
McAfee-GW-EditionPacked-GDT!7C4D3214E430
FireEyeGeneric.mg.7c4d3214e430a674
EmsisoftGen:Heur.Variadic.A.382.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.PSW.Racealer.cxc
AviraTR/AD.StellarStealer.ftmjo
eGambitPE.Heur.InvalidSig
MicrosoftTrojan:Win32/Guloader.VAM!MTB
GridinsoftRansom.Win32.STOP.ko!se14530
SUPERAntiSpywareTrojan.Agent/Gen-Azorult
GDataGen:Heur.Variadic.A.382.1
AhnLab-V3Trojan/Win.Azorult.R431387
Acronissuspicious
McAfeePacked-GDT!7C4D3214E430
MAXmalware (ai score=89)
VBA32BScope.Backdoor.Androm
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R067C0DGM21
RisingTrojan.Kryptik!1.D7FC (CLASSIC)
IkarusTrojan.Win32.Crypt
FortinetW32/GenKryptik.ERHN!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Heur.Variadic.A.382.1?

Heur.Variadic.A.382.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment