Categories: Trojan

Trojan.Heur.kmKfrLAO9Qfbh removal tips

The Trojan.Heur.kmKfrLAO9Qfbh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Heur.kmKfrLAO9Qfbh virus can do?

Creates RWX memory
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

Related domains:

www.58wb.com

www.tao123.com

How to determine Trojan.Heur.kmKfrLAO9Qfbh?


File Info:
crc32: 55F16798md5: ed8742c4617412e3f998f0d113c1f91aname: ED8742C4617412E3F998F0D113C1F91A.mlwsha1: 53664ca487332642f2634f4c2d7cb03bfd47cc7csha256: d915ad8a63485e3c4c4bba3e3d9967e85009cf5dfc1efc18a372f230952b9e39sha512: ff407d29318ecb8d31307d3ee597344abc985152a3f8c696e8df3ead4cb43bfd1b920f358d227493f6639d6b916fd3b489ed9fa34e0aa3aa4c450448b8b77af9ssdeep: 3072:sOfcqdq93MKBPxEb7cbHw7bA9Ac8HJTSGRfryPQvSgHxUQXMmxIbaE:VVq93MGJEbbbA9pLGRfsQ9HDMZbatype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyright ? 2012InternalName: iexploreFileVersion: 6.00.2800.1106 (xpsp1(ganeshs).030917-0249)CompanyName: Microsoft CorporationPrivateBuild: LegalTrademarks: Comments: ProductName: Microsoft? Windows? Operating SystemSpecialBuild: ProductVersion: 6.00.2800.1106FileDescription: Windows Internet ExplorerOriginalFilename: IEXPLORE.EXETranslation: 0x0804 0x04b0

Trojan.Heur.kmKfrLAO9Qfbh also known as:

K7AntiVirus	Trojan ( 005376ae1 )
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad3.33616
Cynet	Malicious (score: 100)
ALYac	Gen:Trojan.Heur.kmKfrLAO9Qfbh
Zillya	Trojan.Genome.Win32.250080
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Trojan:Win32/Snojan.3c5f7fc9
K7GW	Trojan ( 005376ae1 )
Cybereason	malicious.461741
Baidu	Win32.Trojan.Kryptik.gp
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent.VHB
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Snojan.cezy
BitDefender	Gen:Trojan.Heur.kmKfrLAO9Qfbh
NANO-Antivirus	Trojan.Win32.Agent.crfoyr
MicroWorld-eScan	Gen:Trojan.Heur.kmKfrLAO9Qfbh
Tencent	Trojan.Win32.StartPage.dcy
Ad-Aware	Gen:Trojan.Heur.kmKfrLAO9Qfbh
Sophos	Mal/Generic-S
Comodo	Malware@#3mohrh6ks12p7
BitDefenderTheta	AI:Packer.F9DA4AC31D
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Fake.cc
FireEye	Generic.mg.ed8742c4617412e3
Emsisoft	Gen:Trojan.Heur.kmKfrLAO9Qfbh (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1126686
eGambit	Unsafe.AI_Score_60%
Antiy-AVL	Trojan/Generic.ASMalwS.120CBB8
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Trojan.Win32.Snojan.cezy
GData	Gen:Trojan.Heur.kmKfrLAO9Qfbh
McAfee	Artemis!ED8742C46174
MAX	malware (ai score=85)
VBA32	BScope.Trojan.Snojan
Panda	Trj/Genetic.gen
Yandex	Trojan.GenAsa!WDhJxQSRDAQ
Ikarus	Trojan.Win32.Spy
Fortinet	W32/Genome.ALLRY!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml