Malware

How to remove “Heur.VIZ.!e!.1”?

Malware Removal

The Heur.VIZ.!e!.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.VIZ.!e!.1 virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Heur.VIZ.!e!.1?


File Info:

crc32: 1E4F727F
md5: 280024bd40cb355648b1f481b0df3c4c
name: 280024BD40CB355648B1F481B0DF3C4C.mlw
sha1: 7ea7a986dbb212792461ad1409f19bb625307418
sha256: 04b93ecd4861326a01190323e06aeceba57cd45629cd0277b58c1623e38299c3
sha512: e04c7ad374e20d4dd5821218bc4230eded123b167a4657cb2ffe9da626149cf2bffa4a8f5be39f44a40341a8c22fc8664d8c2eb65f06476b4dcdcc1c90e0f02b
ssdeep: 1536:4wOKeqtUAcuTiBWeHYzrohtfXAMgOYrEP/3Y9ZOazNK5u07W:2/KTM4sfvgOYekN0t7W
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Heur.VIZ.!e!.1 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( f1000f011 )
LionicTrojan.Win32.Genome.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Heur.VIZ.!e!.1
CylanceUnsafe
ZillyaTrojan.Genome.Win32.126824
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaTrojan:Win32/PornoBlocker.61791e2f
K7GWTrojan ( f1000f011 )
Cybereasonmalicious.d40cb3
CyrenW32/A-aa9120d9!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Trojan.Agent-839312
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.VIZ.!e!.1
NANO-AntivirusTrojan.Win32.Autoruner.coonfk
MicroWorld-eScanGen:Heur.VIZ.!e!.1
TencentWin32.Trojan.Generic.Hoya
Ad-AwareGen:Heur.VIZ.!e!.1
SophosMal/Generic-R
ComodoTrojWare.Win32.Trojan.XPACK.Gen@2ho5ur
BitDefenderThetaGen:NN.ZexaF.34142.emX@aeQ9Cmcc
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Trojan.lc
FireEyeGeneric.mg.280024bd40cb3556
EmsisoftGen:Heur.VIZ.!e!.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminDangerousObject.Multi.ayb
WebrootW32.Malware.Gen
AviraTR/Ramnit.A
Antiy-AVLTrojan/Generic.ASMalwS.308F56
KingsoftWin32.Infected.Ramnit.sr.(kcloud)
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.VIZ.!e!.1
SUPERAntiSpywareTrojan.Agent/Gen-Autorun[PB]
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Heur.VIZ.!e!.1
TACHYONTrojan/W32.PornoBlocker.78766
AhnLab-V3Trojan/Win32.FraudPack.R3415
McAfeeGenericRXAA-AA!280024BD40CB
MAXmalware (ai score=100)
MalwarebytesSpyware.PasswordStealer.XGen
PandaGeneric Malware
TrendMicro-HouseCallTROJ_GENOME_00000c4.TOMA
YandexTrojan.PornoBlocker!SIaqt1FjbcE
IkarusTrojan-Ransom.PornoBlocker
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Corupx.B!tr
AVGWin32:Trojan-gen

How to remove Heur.VIZ.!e!.1?

Heur.VIZ.!e!.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment