About "Trojan.Heur.VP2.ci0aaOaNcEii" infection

The Trojan.Heur.VP2.ci0aaOaNcEii is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Heur.VP2.ci0aaOaNcEii virus can do?

Executable code extraction
Creates RWX memory
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
The binary likely contains encrypted or compressed data.
Checks for the presence of known windows from debuggers and forensic tools
Network activity detected but not expressed in API logs
Checks for the presence of known devices from debuggers and forensic tools
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Heur.VP2.ci0aaOaNcEii?


File Info:
crc32: AB1287CB
md5: 638d51b40fe39f3db7b57d5d354c98f4
name: DEViATED.exe
sha1: 9a94e2a108efef17049ec1c20e2d66f63a1cb357
sha256: 83c7d299093dcc519bee12e6ff979328b436e940cb3e81058c1a3e15af249d2a
sha512: 0b8945bd11a510b0a97237fc6f193c8784a93ff683e04bea42748982d18585da9d25cf4b3c3313d2744f27df283e3e67f7f8f3293ea18850f533de27479f64aa
ssdeep: 768:9TFsGIGAGav4dey6puaBCr/q8jrCk/qp3OtZyZYTOq1djX:NFsYAGcqGpua8/Gk/WeLybul
type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:
Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: DEViATED
FileVersion: 1.00
OriginalFilename: DEViATED.exe
ProductName: DEViATED

Trojan.Heur.VP2.ci0aaOaNcEii also known as:

MicroWorld-eScan	Gen:Trojan.Heur.VP2.ci0aaOaNcEii
FireEye	Gen:Trojan.Heur.VP2.ci0aaOaNcEii
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Gen:Trojan.Heur.VP2.ci0aaOaNcEii
NANO-Antivirus	Trojan.Win32.Gendal.sjpyx
APEX	Malicious
ClamAV	Win.Trojan.5564383-1
GData	Gen:Trojan.Heur.VP2.ci0aaOaNcEii
AegisLab	Trojan.Win32.Generic.4!c
Rising	Trojan.Win32.Generic.16B4994C (C64:YzY0OqCIGn1ixRTT)
Ad-Aware	Gen:Trojan.Heur.VP2.ci0aaOaNcEii
Emsisoft	Gen:Trojan.Heur.VP2.ci0aaOaNcEii (B)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Trojan.nc
Trapmine	malicious.moderate.ml.score
SentinelOne	DFI – Suspicious PE
Webroot	W32.Trojan.Gen
MAX	malware (ai score=85)
Endgame	malicious (high confidence)
Arcabit	Trojan.Heur.VP2.ci0aaOaNcEii
Acronis	suspicious
McAfee	Artemis!638D51B40FE3
Panda	Generic Malware
Tencent	Win32.Trojan.Gendal.Wnwn
Fortinet	PossibleThreat
Cybereason	malicious.40fe39
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Trojan.Heur.VP2.ci0aaOaNcEii?

Trojan.Heur.VP2.ci0aaOaNcEii removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan.Heur.VP2.ci0aaOaNcEii” infection