How to remove “Trojan.Heur.RP.HmMfaKC!Vocj”?

The Trojan.Heur.RP.HmMfaKC!Vocj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Heur.RP.HmMfaKC!Vocj virus can do?

• Executable code extraction
• Presents an Authenticode digital signature
• Creates RWX memory
• Expresses interest in specific running processes
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The executable is compressed using UPX
• Uses Windows utilities for basic functionality
• Creates a hidden or system file
• Attempts to modify proxy settings

Related domains:

How to determine Trojan.Heur.RP.HmMfaKC!Vocj?

File Info:
crc32: A160FEF9
md5: 94653c958221e49644e591bdcd8b2638
name: ithome.exe
sha1: c01887f3cc0904610271bb24051b8e583fb740f1
sha256: 18b7e965aeef9423a327d8e2561094b2b7b2deca3114f0279eb30344bcdb77a6
sha512: c9659fff1487cf42d22f6c2abde6ec4acfca74113a972f2c962b7fd550015109ee745ab90c735db727b173620ae5d7e6c598d48892479886044f1f82cd064bda
ssdeep: 12288:raQOVg0fs+uTZTXCCCCCqCCCCCCCCCCCCCCCCCCCCCCCCCCCCC50:IfkxXCCCCCqCCCCCCCCCCCCCCCCCCCCl
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: x9752x5c9bx8f6fx5a92
InternalName: ITHome
FileVersion: 1.0.6.0
CompanyName: x9752x5c9bx8f6fx5a92x7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: ITx4e4bx5bb6
ProductVersion: 1.0.6.0
FileDescription: ITx4e4bx5bb6
OriginalFilename: ITHome.exe
Translation: 0x0804 0x04b0

Trojan.Heur.RP.HmMfaKC!Vocj also known as:

How to remove Trojan.Heur.RP.HmMfaKC!Vocj?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.