How to remove “Trojan.Heur.GM.0000126900 (B)”?

The Trojan.Heur.GM.0000126900 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Heur.GM.0000126900 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Trojan.Heur.GM.0000126900 (B)?


File Info:
name: 53DF80B41A42851B8F80.mlw
path: /opt/CAPEv2/storage/binaries/4a689c067b9359660c43b3969cdda5d005f32502ae6f229a83795774ded36594
crc32: 65046811
md5: 53df80b41a42851b8f806c6a9d728c85
sha1: f096c9e4fb3ad6cf35c7eeaa74589edc2e22871d
sha256: 4a689c067b9359660c43b3969cdda5d005f32502ae6f229a83795774ded36594
sha512: 68006bdd0753659cdef53cebbf7a96ce1aa18748dd6af1dec8eeb12ec9d7af8ded8d6f468a7c68f882feb9c4a54518324df997e49b4c93acc6e81f6a0ee08fb6
ssdeep: 1536:B2PSxESZBoy07S2YHHOUeOVzmAPgUl5UxphZLQ/962rN9njHIFD7dFpoAWH2z6O+:MetP7EIqIgm6l6hLn7g7dF9WHoy+5sp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10C0449277B848D2BC62D0F7AE4A1170B62B4D5522A42F3577CC627E85E0E7CC49B13E6
sha3_384: 61b332abb1895e01d7025821d3ffdea2da2053081ca1b08479d63315735b85d5122d921b7717abbe068175a5a2b43a2a
ep_bytes: ff250020430000000000000000000000
timestamp: 2056-09-18 02:47:26

Version Info:
Translation: 0x0000 0x04b0
Comments: hnbzdfikeao
CompanyName: hnbzdfikeao
FileDescription: hnbzdfikeao
FileVersion: 1.0.0.0
InternalName: hnbzdfikeao.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: hnbzdfikeao.exe
ProductName: hnbzdfikeao
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan.Heur.GM.0000126900 (B) also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.31761
MicroWorld-eScan	Gen:Trojan.Heur.GM.0000126900
FireEye	Generic.mg.53df80b41a42851b
ALYac	Gen:Trojan.Heur.GM.0000126900
Cybereason	malicious.41a428
BitDefenderTheta	AI:Packer.76F6C6061D
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R032C0WL921
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan-PSW.MSIL.Zema.gen
BitDefender	Gen:Trojan.Heur.GM.0000126900
Avast	Win32:Malware-gen
Ad-Aware	Gen:Trojan.Heur.GM.0000126900
Sophos	ML/PE-A
F-Secure	Trojan.TR/Crypt.XPACK.Gen
TrendMicro	TROJ_GEN.R032C0WL921
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Emsisoft	Gen:Trojan.Heur.GM.0000126900 (B)
GData	Gen:Trojan.Heur.GM.0000126900
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/MSIL.Llac
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Acronis	suspicious
McAfee	Artemis!53DF80B41A42
VBA32	BScope.TrojanPSW.Banker
Malwarebytes	Trojan.Dropper
APEX	Malicious
Rising	Malware.Heuristic!ET#99% (RDMK:cmRtazrzNDoqDklbqg10FLEdatcS)
Yandex	Trojan.GenAsa!5+mHTzH+jdQ
SentinelOne	Static AI – Malicious PE
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Trojan.Heur.GM.0000126900 (B)?

Trojan.Heur.GM.0000126900 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X