Trojan.Heur.RP.emGfbmgn4oji information

The Trojan.Heur.RP.emGfbmgn4oji is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Heur.RP.emGfbmgn4oji virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Heur.RP.emGfbmgn4oji?


File Info:
name: 4BCCB40F440D6092DA8B.mlw
path: /opt/CAPEv2/storage/binaries/c67d1db41c1098f0e39dc6e23844e195078cdab5eb9fdb444548139e0f94314d
crc32: 287E20EB
md5: 4bccb40f440d6092da8bd8c11838b36a
sha1: ae9b0f3f4c48dc8703c038bad6163dee83bdc4ba
sha256: c67d1db41c1098f0e39dc6e23844e195078cdab5eb9fdb444548139e0f94314d
sha512: 13f02bf92787674682fa605c0b65f896ec1f8ab3fed62dc20f99c1fe038466c8ad2c44ee4a485639c91c53e4801bbc853d3660162e8365c6bc8c87a8d77267da
ssdeep: 24576:XJlDubq0K5mZSo+mdO+rF6NzETH+/SF8hS+A5:5pubq0KabDFrF6uq/S2hnA5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16315237902404F13DA6908FC8A25D735A8FBD6CA4FD79C873FB834594C1A69BCD1648B
sha3_384: 62f9b27d38d79889d0b09afa81ba851dc2cef33d1ddbb4a2a7a39ed215b64abc5d30c140e4fea2223336e0d80799e211
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:
0: [No Data]

Trojan.Heur.RP.emGfbmgn4oji also known as:

MicroWorld-eScan	Gen:Trojan.Heur.RP.emGfbmgn4oji
FireEye	Gen:Trojan.Heur.RP.emGfbmgn4oji
APEX	Malicious
BitDefender	Gen:Trojan.Heur.RP.emGfbmgn4oji
VIPRE	Gen:Trojan.Heur.RP.emGfbmgn4oji
Emsisoft	Gen:Trojan.Heur.RP.emGfbmgn4oji (B)
GData	Gen:Trojan.Heur.RP.emGfbmgn4oji
Arcabit	Trojan.Heur.RP.emGfbmgn4oji
BitDefenderTheta	Gen:NN.ZexaF.36348.emGfamgn4oji
ALYac	Gen:Trojan.Heur.RP.emGfbmgn4oji
MAX	malware (ai score=85)
VBA32	Malware-Cryptor.Limpopo
DeepInstinct	MALICIOUS

How to remove Trojan.Heur.RP.emGfbmgn4oji?

Trojan.Heur.RP.emGfbmgn4oji removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X