Trojan.Heur2.GZ.iKWbbqflZ4h removal

The Trojan.Heur2.GZ.iKWbbqflZ4h is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Heur2.GZ.iKWbbqflZ4h virus can do?

Executable code extraction
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Heur2.GZ.iKWbbqflZ4h?


File Info:
crc32: D48D95D3
md5: 5081ea1cb03f7c578aea51657ede2391
name: 5081EA1CB03F7C578AEA51657EDE2391.mlw
sha1: 59138a67179949443757df890ad5811c7c8d1bbb
sha256: be38468f6225d4f61a1164f791a96e0a732e6205d5677268e712288d382e15a7
sha512: 84cb7e3dac96a2e65e274c0fddd863bf06bd4ef39da38bdb40cbca824e5166f23d1ce2243b950c66c3cdf4ee3e92aa6f7c6f834ff8e45f8f18b6d8c00264d9fc
ssdeep: 3072:UUa0r6GHiLCCdlUBOf/54OmB/MQra0aBc+Im5ZTXRiM62dO:D36GDO3bQYP5ZhiJ2d
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Trojan.Heur2.GZ.iKWbbqflZ4h also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur2.GZ.iKWbbqflZ4h
FireEye	Generic.mg.5081ea1cb03f7c57
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Trojan.Heur2.GZ.iKWbbqflZ4h
Cybereason	malicious.cb03f7
Invincea	ATK/Cobalt-A
Symantec	Backdoor.Cobalt
APEX	Malicious
ClamAV	Win.Trojan.CobaltStrike-7899872-1
Kaspersky	HEUR:Trojan.Win32.Cometer.gen
NANO-Antivirus	Trojan.Win32.Rozena.hpcmlv
Ad-Aware	Gen:Trojan.Heur2.GZ.iKWbbqflZ4h
Emsisoft	Gen:Trojan.Heur2.GZ.iKWbbqflZ4h (B)
F-Secure	Trojan.TR/Crypt.ASPM.Gen
DrWeb	BackDoor.Siggen2.247
McAfee-GW-Edition	GenericRXMO-OO!FFD984C7738D
MaxSecure	Trojan.Malware.10056239.susgen
Sophos	ATK/Cobalt-A
Avira	TR/Crypt.ASPM.Gen
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Wacatac.DB!ml
Gridinsoft	Ransom.Win32.Wacatac.oa!s1
Arcabit	Trojan.Heur2.GZ.iKWbbqflZ4h
ZoneAlarm	HEUR:Trojan.Win32.Cometer.gen
GData	Gen:Trojan.Heur2.GZ.iKWbbqflZ4h
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4222481
Acronis	suspicious
McAfee	Artemis!5081EA1CB03F
VBA32	BScope.Trojan.Cometer
ESET-NOD32	a variant of Win32/Rozena.AMZ
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Generic.AP.118EACE!tr
BitDefenderTheta	AI:Packer.45A511CA1F
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	HEUR/QVM13.0.44A7.Malware.Gen

How to remove Trojan.Heur2.GZ.iKWbbqflZ4h?

Trojan.Heur2.GZ.iKWbbqflZ4h removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X