Trojan

Trojan.Heur.uGqer5rF7epGh information

Malware Removal

The Trojan.Heur.uGqer5rF7epGh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur.uGqer5rF7epGh virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Portuguese (Brazilian)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Heur.uGqer5rF7epGh?


File Info:

crc32: 12C8873C
md5: 2fa60addec62ed8105068cb0b7a16869
name: 2FA60ADDEC62ED8105068CB0B7A16869.mlw
sha1: 4d9f786796fc321799e31eae460bf69549116547
sha256: 287177570e97999217a8660ea91e757d5e22a53ad178feb70f2c7f235a121204
sha512: ff7334c0b38f33b4019761cc9c8ed207ab1356a722c021c6fd76ed796e6e2bab39775b6022514c1c476684c28490bec1baa21fd0c76373ac104c27f493bce7ea
ssdeep: 6144:g/Xgcn/d1kP5Lr2eOtB0aceR3MRSIMHuMkG0/aZNB42pXDoGZ7h69M:g/XgcMlrvOLaelCeHuo0yVRDxZ7h66
type: PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed

Version Info:

0: [No Data]

Trojan.Heur.uGqer5rF7epGh also known as:

K7AntiVirusTrojan ( 7000000f1 )
LionicTrojan.Win32.Banbra.mgCA
Elasticmalicious (high confidence)
DrWebTrojan.PWS.ICQSniff
ALYacGen:Trojan.Heur.uGqer5rF7epGh
ZillyaTrojan.Banbra.Win32.19292
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanBanker:Win32/Banbra.008222bf
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.dec62e
CyrenW32/Banker.BODI-5960
SymantecInfostealer.Banpaes
ESET-NOD32a variant of Win32/Spy.Banker
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyTrojan-Banker.Win32.Banbra.z
BitDefenderGen:Trojan.Heur.uGqer5rF7epGh
NANO-AntivirusTrojan.Win32.Banbra.htuv
ViRobotTrojan.Win32.A.Banbra.329326
MicroWorld-eScanGen:Trojan.Heur.uGqer5rF7epGh
TencentMalware.Win32.Gencirc.11491806
Ad-AwareGen:Trojan.Heur.uGqer5rF7epGh
SophosMal/Generic-R + Mal/DelpBanc-A
ComodoTrojWare.Win32.Banbra.sw@4kvwn6
BitDefenderThetaAI:Packer.5975C1A51D
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PJU21
McAfee-GW-EditionBehavesLike.Win32.Pahooka.fc
FireEyeGeneric.mg.2fa60addec62ed81
EmsisoftGen:Trojan.Heur.uGqer5rF7epGh (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojanSpy.Banbra.d
WebrootW32.Malware.Gen
AviraTR/Crypt.CFI.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.2E8AC
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Trojan.Heur.uGqer5rF7epGh
AhnLab-V3Trojan/Win32.Agent.C131264
McAfeeArtemis!2FA60ADDEC62
MAXmalware (ai score=100)
VBA32TScope.Trojan.Delf
PandaTrj/Banbra.DQQ
TrendMicro-HouseCallTROJ_GEN.R002C0PJU21
RisingTrojan.Spy.Banbra.wos (CLASSIC)
YandexTrojan.GenAsa!P4LJ/4rcq8U
IkarusTrojan-Spy.Win32.Banbra
FortinetMalware_fam.gw
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Trojan.Heur.uGqer5rF7epGh?

Trojan.Heur.uGqer5rF7epGh removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment