How to remove “Trojan.Heur.VP2.cmKfaS0PqZii”?

The Trojan.Heur.VP2.cmKfaS0PqZii is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Heur.VP2.cmKfaS0PqZii virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Trojan.Heur.VP2.cmKfaS0PqZii?


File Info:
name: 47E3093727B0B452585A.mlw
path: /opt/CAPEv2/storage/binaries/8c32a359945b1d5bab2d675599b47727680dd7ed1c723eda0ba14ec7c44879ac
crc32: 9CAB30F0
md5: 47e3093727b0b452585a9073820689e1
sha1: becf429120d506b5dbae53bc2b93044e2a13d37d
sha256: 8c32a359945b1d5bab2d675599b47727680dd7ed1c723eda0ba14ec7c44879ac
sha512: 0d868dcdfff7156fdcd9bcd33c701618b06c5b69504ccd3793c36b78b15e1271d5882119363dd047f17bc566333adb0cbc38f3e7243d9e078cbe67e4828f2f5d
ssdeep: 768:XoKZWS+8RbMtZ4EiI1i42QkbWvK6ReKivhwjdfjxE+b9+:Xrr+8BYiWi42Qkp6TivhKZjX+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T147E2F22CE6B92106C1D4CBB2E37BCB8A350A7A51DD7517671E281E056CFD203AD32E93
sha3_384: 2c29b24f5500e2a72529abc29a9ec4164124f3a8a8e1d3310c1af4d3583d239b65d1a3cccfb3af5e286456520b5833c6
ep_bytes: 60be003041008dbe00e0feff57eb0b90
timestamp: 2011-02-09 03:35:34

Version Info:
Translation: 0x0409 0x04b0
ProductName: lGxEZWhGhKzzKG
FileVersion: 5.56
ProductVersion: 5.56
InternalName: VTZciNg
OriginalFilename: VTZciNg.exe

Trojan.Heur.VP2.cmKfaS0PqZii also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Generic.o!c
Elastic	malicious (moderate confidence)
DrWeb	Trojan.Siggen.64685
MicroWorld-eScan	Gen:Trojan.Heur.VP2.cmKfaS0PqZii
Skyhigh	BehavesLike.Win32.Vilsel.nc
McAfee	Artemis!47E3093727B0
Cylance	unsafe
VIPRE	Gen:Trojan.Heur.VP2.cmKfaS0PqZii
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Trojan.Heur.VP2.cmKfaS0PqZii
CrowdStrike	win/malicious_confidence_70% (W)
Arcabit	Trojan.Heur.VP2.cmKfaS0PqZii
BitDefenderTheta	AI:Packer.A1EB788320
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Agent_AGen.AYN
APEX	Malicious
ClamAV	Win.Trojan.Changeup-6169544-0
Kaspersky	HEUR:Worm.Win32.Generic
ViRobot	Trojan.Win.Z.Wacapew.33792.A
Rising	Worm.VobfusEx!1.99EB (CLOUD)
Google	Detected
F-Secure	Trojan.TR/Dropper.Gen
Baidu	Win32.Worm.AutoRun.cj
TrendMicro	TROJ_GEN.R002C0WKA23
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.47e3093727b0b452
Emsisoft	Gen:Trojan.Heur.VP2.cmKfaS0PqZii (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	malware.kb.b.987
Microsoft	Trojan:Win32/Caynamer.A!ml
ZoneAlarm	UDS:Worm.Win32.Generic
GData	Gen:Trojan.Heur.VP2.cmKfaS0PqZii
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Occamy.C3245804
ALYac	Gen:Trojan.Heur.VP2.cmKfaS0PqZii
DeepInstinct	MALICIOUS
VBA32	SScope.Trojan.VBRA.11309
Malwarebytes	Generic.Malware/Suspicious
Panda	W32/Autorun.JUV.worm
TrendMicro-HouseCall	TROJ_GEN.R002C0WKA23
Tencent	Win32.Worm.Generic.Vdkl
Yandex	Trojan.GenAsa!o/OBX+/FVDI
Ikarus	Trojan.VB
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.2438!tr
AVG	Win32:AutoRun-BVZ [Trj]
Cybereason	malicious.120d50
Avast	Win32:AutoRun-BVZ [Trj]

How to remove Trojan.Heur.VP2.cmKfaS0PqZii?

Trojan.Heur.VP2.cmKfaS0PqZii removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X