Should I remove “Trojan.Downloader.CP”?

The Trojan.Downloader.CP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Downloader.CP virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Downloader.CP?


File Info:
name: E3EF6E65CD945CF2C987.mlw
path: /opt/CAPEv2/storage/binaries/2ef3b9da24005985189ae5b0463b8b91995bbb66d82d5a229c5edcf9072f3162
crc32: 485D8B5F
md5: e3ef6e65cd945cf2c9877d830ef8ed97
sha1: 636435bda16ecab0cc486c92b380dc148ab8fff0
sha256: 2ef3b9da24005985189ae5b0463b8b91995bbb66d82d5a229c5edcf9072f3162
sha512: 8e61488a831df3dcb032a4f4841cf1242e48f799ed5921f0b79cfed9bdfe40a4ca24b7ef9b746aa80fa303f61f4451c516c87b823a1edc4f4741e3a67c28978a
ssdeep: 24576:JBihV99MzjWJRyhlZXSovVgoQrxoZybW5PWcc3AgjQ4BvwHWw:uhdMzjW3yhKoiFxoeW51c2HWw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A9A523425BD48827D0E9137548F5A667BBB1F0140EEA6708BB8B2BCA5C340DEFA7171D
sha3_384: f725cd75d6c81723c3686f2730d0daf70e7667d2955b620099b9e1c69056df49ea4bcc9370ff73d83ab906bbb6a729fb
ep_bytes: 558bec83ec4456ff155c1100018bf08a
timestamp: 2001-08-18 01:42:57

Version Info:
0: [No Data]

Trojan.Downloader.CP also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.Downloader.CP
FireEye	Generic.mg.e3ef6e65cd945cf2
BitDefenderTheta	Gen:NN.ZedlaF.36662.bmSfa0d9O9pb
APEX	Malicious
BitDefender	Trojan.Downloader.CP
Sophos	Mal/Behav-126
VIPRE	Trojan.Downloader.CP
Emsisoft	Trojan.Downloader.CP (B)
GData	Trojan.Downloader.CP (2x)
Xcitium	Malware@#3uys0es8hbuy1
Arcabit	Trojan.Downloader.CP [many]
Microsoft	TrojanDownloader:Win32/QQHelper.KA
Google	Detected
ALYac	Dropped:Adware.MMsAssist.A
MAX	malware (ai score=82)
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Trojan.Downloader.CP?

Trojan.Downloader.CP removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X