Trojan

Trojan.Heur.RP.cmGfbKB2Kep removal

Malware Removal

The Trojan.Heur.RP.cmGfbKB2Kep is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur.RP.cmGfbKB2Kep virus can do?

  • Detected script timer window indicative of sleep style evasion
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Trojan.Heur.RP.cmGfbKB2Kep?


File Info:

crc32: 69D5FECE
md5: 9bf9b07ad86a2485fa1f5b9bbf63e3aa
name: 9BF9B07AD86A2485FA1F5B9BBF63E3AA.mlw
sha1: af9d01fa3d567913ba3aedf37775169d022043e8
sha256: edc704084a06ade0dbb24eb7db9d76c9cfc1bbaa243a4375e8f5f944a7833898
sha512: 147b5f6c3f96ca73d88bbfb1214f30c0e9173010da298d890d4a8ae845469d3302326272bd3de815e63fb96d1e4cb3a973cf5ca93de341ff92bb36a3bb26307f
ssdeep: 768:i7YV1c0/IzZCbX9WfZYfdErwfm+k8nUvGwGsgQpj93HUSf4EVchhOlWuW5CO:i7YVa0Azkbcw/mKnUusDj9ESAEVcXkp
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan.Heur.RP.cmGfbKB2Kep also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0051918e1 )
Elasticmalicious (high confidence)
DrWebBackDoor.Bifrost.30825
ALYacGen:Trojan.Heur.RP.cmGfbKB2Kep
CylanceUnsafe
BitDefenderGen:Trojan.Heur.RP.cmGfbKB2Kep
K7GWTrojan ( 0051918e1 )
Cybereasonmalicious.ad86a2
CyrenW32/Agent.BJD.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan-Dropper.Win32.Convagent.gen
NANO-AntivirusTrojan.Win32.Jenxcus.exwzsd
MicroWorld-eScanGen:Trojan.Heur.RP.cmGfbKB2Kep
TencentMalware.Win32.Gencirc.11c11b4f
Ad-AwareGen:Trojan.Heur.RP.cmGfbKB2Kep
SophosGeneric ML PUA (PUA)
F-SecureHeuristic.HEUR/AGEN.1135096
BitDefenderThetaAI:Packer.49D40EFA1E
McAfee-GW-EditionBehavesLike.Win32.Generic.pc
FireEyeGeneric.mg.9bf9b07ad86a2485
EmsisoftGen:Trojan.Heur.RP.cmGfbKB2Kep (B)
SentinelOneStatic AI – Malicious PE
JiangminRiskTool.BitMiner.ahgw
AviraHEUR/AGEN.1135096
Antiy-AVLTrojan/Generic.ASMalwS.245AFEA
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Heur.RP.cmGfbKB2Kep
GDataWin32.Trojan.BSE.QSCBGO
McAfeeGenericRXDZ-AH!EAC8EB71CABD
MAXmalware (ai score=84)
VBA32Trojan.Swrort
RisingMalware.Heuristic!ET#87% (RDMK:cmRtazp802jCPc7e6G3lWByuboMr)
YandexTrojan.GenAsa!EMGIAZKnGJA
IkarusBackdoor.Bladabindi
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.84AE!tr

How to remove Trojan.Heur.RP.cmGfbKB2Kep?

Trojan.Heur.RP.cmGfbKB2Kep removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment