About "Trojan.Heur.cmKfrupmUigk" infection

The Trojan.Heur.cmKfrupmUigk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Heur.cmKfrupmUigk virus can do?

Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Heur.cmKfrupmUigk?


File Info:
crc32: 97444CE6
md5: 274ac03a36d0e5a396a660dc74bce06f
name: 274AC03A36D0E5A396A660DC74BCE06F.mlw
sha1: 3f179b65528fa21f889bb1826339870de0b52623
sha256: bd6e491f7b9ea4b72ca2234e4c98ba30fc781098bf814351f854a232bfb1e18a
sha512: 930187a3e29edf120a41c15dff16fbac2a695f171a2552267f9e4f7b9b65f689ee65129e3570e4ccd119ac108a6a32a1d4c61964507c87c225327ef3b80ea507
ssdeep: 768:cujtr6O/19YOuhqMuWrxpZ6/DqdR7QBfyfRnurtwV42:e0/4h4W/Z6/DeQRg42
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
Proc. Architecture: x86
InternalName: SFXCAB.EXE
KB Article Number: 890047
FileVersion: 1
Build Date: 2006/02/17
CompanyName: Microsoft Corporation
Installer Engine: update.exe
Applies to: Windows XP Service Pack 1; Windows XP Service Pack 2
Self-Extractor Version: SFXCAB v5.5.33.0
ProductName: Windows XP Family
Installation Type: Full
Package Type: Security Update
ProductVersion: 5.5.0033.0
FileDescription: Security Update
Support Link: http://support.microsoft.com?kbid=890047
OriginalFilename: SFXCAB.EXE
Installer Version: 5.5.33.0
Translation: 0x0409 0x04b0

Trojan.Heur.cmKfrupmUigk also known as:

K7AntiVirus	Trojan ( 7000000f1 )
Lionic	Virus.Win32.Lamer.l6Sd
Cynet	Malicious (score: 70)
ALYac	Gen:Trojan.Heur.cmKfrupmUigk
Cylance	Unsafe
Zillya	Tool.BadJoke.Win32.2639
Alibaba	Ransom:Win32/BadJoke.0c239a5d
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.a36d0e
Cyren	W32/Joke.ZIUZ-4533
Symantec	W32.Kitro.Gen
APEX	Malicious
Avast	FileRepMetagen [Malware]
BitDefender	Gen:Trojan.Heur.cmKfrupmUigk
NANO-Antivirus	Riskware.Win32.Delf.bcwbn
MicroWorld-eScan	Gen:Trojan.Heur.cmKfrupmUigk
Tencent	Win32.Trojan-PSW.Badjoke.oww
Ad-Aware	Gen:Trojan.Heur.cmKfrupmUigk
Comodo	ApplicUnsaf@#pck3fjgv9jwz
BitDefenderTheta	AI:Packer.170AE7911C
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	JOKEPROGRAMS_DELF
McAfee-GW-Edition	BehavesLike.Win32.Fake.nc
FireEye	Gen:Trojan.Heur.cmKfrupmUigk
Emsisoft	Gen:Trojan.Heur.cmKfrupmUigk (B)
Avira	HEUR/Crypted
eGambit	Unsafe.AI_Score_73%
Antiy-AVL	Trojan/Generic.ASMalwS.254AD2
Microsoft	Trojan:Win32/DSSDetection
GData	Gen:Trojan.Heur.cmKfrupmUigk
AhnLab-V3	Win-AppCare/Xema.34816
McAfee	Generic PUP.by
MAX	malware (ai score=100)
Panda	Generic Malware
TrendMicro-HouseCall	JOKEPROGRAMS_DELF
Yandex	Trojan.GenAsa!uNF5lEgv1Tw
Ikarus	Trojan.Win32.FormatC
Fortinet	Riskware/Delf
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.PornoBlocker.HgIASUUA

How to remove Trojan.Heur.cmKfrupmUigk?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan.Heur.cmKfrupmUigk” infection