Trojan

Trojan.Heur.jmGfr1aEF5kcf removal

Malware Removal

The Trojan.Heur.jmGfr1aEF5kcf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur.jmGfr1aEF5kcf virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Heur.jmGfr1aEF5kcf?


File Info:

crc32: 52EE50D5
md5: 052b9e064180a9a0dd2838430915691e
name: 052B9E064180A9A0DD2838430915691E.mlw
sha1: b7100ab30c0cdade0553e8066f3e177a29091f7c
sha256: 5446c250903dc30ef4910db1e4cec161b6a084cbd50159a666ca794ced301e30
sha512: 5d96196abd88a94563b5a61aaa157991e2a53fc33c0199b08ea1e8b79c743ae96afb0cc300d9a1815d1ea5aa09520d4f29bc147b18f9204792d2d3e46564d147
ssdeep: 3072:nx4BDjZN/uNgEKExtO+IjRaqc2Oof2KxdhbdNs/z5ObeAL1Yi:x4hb/egEKMtO+IlaV2f2KlbI7IL1
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan.Heur.jmGfr1aEF5kcf also known as:

K7AntiVirusTrojan ( 7000000f1 )
DrWebTrojan.PWS.Ggpass.492
CynetMalicious (score: 99)
ALYacGen:Trojan.Heur.jmGfr1aEF5kcf
CylanceUnsafe
ZillyaTrojan.Gen.Win32.1975
SangforRansom.Win32.Gen.gwi
AlibabaRansom:Win32/DelFile.a9ebf723
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.64180a
CyrenW32/Trojan-Gypikon-based.DM2!Ma
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Gen.gwi
BitDefenderGen:Trojan.Heur.jmGfr1aEF5kcf
NANO-AntivirusTrojan.Win32.DelFile.exagyh
MicroWorld-eScanGen:Trojan.Heur.jmGfr1aEF5kcf
TencentWin32.Trojan.Gen.Crj
Ad-AwareGen:Trojan.Heur.jmGfr1aEF5kcf
SophosMal/Generic-S
ComodoMalware@#1lr2qto8q8ata
BitDefenderThetaAI:Packer.4E9807651D
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.cc
FireEyeGen:Trojan.Heur.jmGfr1aEF5kcf
EmsisoftGen:Trojan.Heur.jmGfr1aEF5kcf (B)
JiangminTrojan.Gen.re
AviraTR/DelFile.owqaj
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:Win32/Genasom
AegisLabTrojan.Win32.Gen.4!c
GDataGen:Trojan.Heur.jmGfr1aEF5kcf
AhnLab-V3Trojan/Win32.Gen
McAfeeArtemis!052B9E064180
MAXmalware (ai score=96)
VBA32BScope.TrojanRansom.Gen
PandaTrj/GdSda.A
RisingRansom.Gen!8.DE83 (CLOUD)
YandexTrojan.Gen!/Yg/+dK9nB8
IkarusTrojan.DelFile
FortinetGenerik.EIDOYET!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Heur.jmGfr1aEF5kcf?

Trojan.Heur.jmGfr1aEF5kcf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment