Trojan

Should I remove “Trojan.Heur.vi1frzB76Kebe”?

Malware Removal

The Trojan.Heur.vi1frzB76Kebe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur.vi1frzB76Kebe virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan.Heur.vi1frzB76Kebe?


File Info:

crc32: 76B95DF8
md5: f89b62b195dbd6bfc413fadc0c5776dd
name: F89B62B195DBD6BFC413FADC0C5776DD.mlw
sha1: 98d5ec420d8979337af3c0c9ae10f0fe284993d5
sha256: 566eb3f5dcd91e52dde9049d6a23a3bf03a897e467776dba1947106b25322107
sha512: 6829853174b2138a034aff6bbec3c41d02dda54fb498c218b5ae354be318807869c790d133f1477aaf0e811c71021cf529c1bf6e6d74ceb9b5ef78da4d6fb1f7
ssdeep: 6144:N26Tez1WDzzbjBLqxH2q8G+ztPow+JaLKJKmtZkaIkFNX1cKckrZ7tgIs2TV5n7N:N61WDbpqxUhPliaWJKqZmkDX1cKckrZZ
type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:

LegalCopyright: 1.0 x7248x6743x6240x6709
FileVersion: 1.0.0.0
CompanyName: 1.0
Comments: 1.0
ProductName: 1.0
ProductVersion: 1.0.0.0
FileDescription: 1.0
Translation: 0x0804 0x04b0

Trojan.Heur.vi1frzB76Kebe also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
ClamAVLegacy.Trojan.Agent-1388588
McAfeeArtemis!F89B62B195DB
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderGen:Trojan.Heur.vi1frzB76Kebe
Cybereasonmalicious.195dbd
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
CynetMalicious (score: 99)
KasperskyUDS:Backdoor.Win32.Farfli
MicroWorld-eScanGen:Trojan.Heur.vi1frzB76Kebe
TencentWin32.Trojan.Crypt.Eerb
Ad-AwareGen:Trojan.Heur.vi1frzB76Kebe
SophosGeneric ML PUA (PUA)
BitDefenderThetaAI:Packer.4142906A1D
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
FireEyeGeneric.mg.f89b62b195dbd6bf
EmsisoftGen:Trojan.Heur.vi1frzB76Kebe (B)
AviraTR/Crypt.CFI.Gen
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Trojan.Heur.vi1frzB76Kebe
AhnLab-V3Malware/Gen.Reputation.C4368503
MAXmalware (ai score=88)
MalwarebytesMalware.Heuristic.1001
RisingBackdoor.Farfli!8.B4 (TFE:dGZlOgUDCTcAVQIhpA)
SentinelOneStatic AI – Suspicious PE

How to remove Trojan.Heur.vi1frzB76Kebe?

Trojan.Heur.vi1frzB76Kebe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment