What is “Trojan.Heur.GM.0004030820 (B)”?

The Trojan.Heur.GM.0004030820 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Heur.GM.0004030820 (B) virus can do?

Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Heur.GM.0004030820 (B)?


File Info:
name: 544F76658838264E4D81.mlw
path: /opt/CAPEv2/storage/binaries/70fe280df58759d92553de3002af9a052a20e1a95ef5e9ae5e75e3812a425789
crc32: 26557C1B
md5: 544f76658838264e4d81a74238c76fcc
sha1: 5f8653ea23325a2ba321642da43c300b453993f8
sha256: 70fe280df58759d92553de3002af9a052a20e1a95ef5e9ae5e75e3812a425789
sha512: 77fb05d4b2c33da97372d993a73f927d6ad00a81d9cce4f8ab7006d87f6c0d53b9348ab7e8e86335efcfae7abe5775d2baac51806d54737d64414cf8249bdbb8
ssdeep: 768:Gdj9I005KztN0ychHUdPw9qX2uTvDqyvRijv9SGz/Cf76LwJIGKOfZrRn0510lqm:mI005dLKZrRncvo80myRI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B1836C0B7891843BC5A356F111795B25DF7F7B700115A383DB80286B7F2159EAF2632E
sha3_384: 1c6a08a56b5be0847938fb2afc3f5e6277ea59ab497c884e8687441838581b83daaad44143c142f9b6a7402e612b25bf
ep_bytes: 558bec6aff680091400068c861400064
timestamp: 2008-08-30 15:55:04

Version Info:
0: [No Data]

Trojan.Heur.GM.0004030820 (B) also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Trojan.Heur.GM.0004030820
ALYac	Gen:Trojan.Heur.GM.0004030820
Cylance	Unsafe
Cybereason	malicious.588382
BitDefenderTheta	AI:Packer.621A4F691D
Symantec	ML.Attribute.HighConfidence
BitDefender	Gen:Trojan.Heur.GM.0004030820
NANO-Antivirus	Virus.Win32.Gen.ccmw
Avast	Win32:Vitro [Inf]
Ad-Aware	Gen:Trojan.Heur.GM.0004030820
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Mytob.mz
SentinelOne	Static AI – Malicious PE
FireEye	Generic.mg.544f76658838264e
Emsisoft	Gen:Trojan.Heur.GM.0004030820 (B)
Jiangmin	Trojan.Generic.acusu
Antiy-AVL	Trojan/Generic.ASMalwS.9B18E9
GData	Gen:Trojan.Heur.GM.0004030820
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!544F76658838
VBA32	Trojan.Occamy
APEX	Malicious
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazrRE4D044QoSifPUAi0Ve7B)
MAX	malware (ai score=84)
AVG	Win32:Vitro [Inf]
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Trojan.Heur.GM.0004030820 (B)?

Trojan.Heur.GM.0004030820 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X