How to remove “Trojan.Heur2.VP2.di1aaGXjHdki”?

The Trojan.Heur2.VP2.di1aaGXjHdki is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Heur2.VP2.di1aaGXjHdki virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Heur2.VP2.di1aaGXjHdki?


File Info:
crc32: 7347081A
md5: 0a79a7f92ae35002b829cb21e8af468a
name: 0A79A7F92AE35002B829CB21E8AF468A.mlw
sha1: 0a9032a8955b555d567f701e5de091f08def1a94
sha256: eabfb040d45ffb1b17a132d5fe483ab2dbbabeac7e887f38b36aa24a78ea436c
sha512: b4f8c94cefcaa82f38a7bb5b782c5a2cfd1d47a6fd8f943c31cebf8c50c9e6f02eb0c5efe9ee05ac181b589a61b9f1fad10c5d6c86b2d1a3112eab55d2a42c2e
ssdeep: 1536:9Ywpa9x8mtHwZ+WEoOXt+VXHX6XdWOj8sFcc:9YwpQlHwo6O9+VXKgOj8sFcc
type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:
Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: hd9h219ch19f1c9h19c
FileVersion: 1.00
OriginalFilename: hd9h219ch19f1c9h19c.exe
ProductName: hd9h219ch19f1c9h19c

Trojan.Heur2.VP2.di1aaGXjHdki also known as:

Bkav	W32.AIDetect.malware1
Lionic	Worm.Win32.AutoRun.o!c
Elastic	malicious (high confidence)
DrWeb	BackDoor.Cybergate.1
ALYac	Gen:Trojan.Heur2.VP2.di1aaGXjHdki
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	NetWorm ( 700000151 )
K7AntiVirus	NetWorm ( 700000151 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EWB
APEX	Malicious
Avast	FileRepMalware
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Sdbot.afem
BitDefender	Gen:Trojan.Heur2.VP2.di1aaGXjHdki
NANO-Antivirus	Trojan.Win32.Sdbot.fijtli
MicroWorld-eScan	Gen:Trojan.Heur2.VP2.di1aaGXjHdki
Tencent	Win32.Trojan.Generic.Glt
Ad-Aware	Gen:Trojan.Heur2.VP2.di1aaGXjHdki
Sophos	Mal/Generic-G
Comodo	TrojWare.Win32.Trojan.XPACK.Gen@2ho5ur
BitDefenderTheta	AI:Packer.3264E4CB21
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.qc
FireEye	Generic.mg.0a79a7f92ae35002
Emsisoft	Gen:Trojan.Heur2.VP2.di1aaGXjHdki (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Malware.Gen
Avira	TR/Crypt.PEPM.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Heur2.VP2.di1aaGXjHdki
GData	Gen:Trojan.Heur2.VP2.di1aaGXjHdki
AhnLab-V3	Trojan/Win32.Gen
McAfee	Artemis!0A79A7F92AE3
MAX	malware (ai score=82)
VBA32	BScope.Backdoor.Cybergate
Panda	Generic Malware
Yandex	Trojan.Injector!dFkIQlAXZnY
Ikarus	Virus.Win32.VBInject
Fortinet	W32/Magania.IDPJ!tr
AVG	FileRepMalware

How to remove Trojan.Heur2.VP2.di1aaGXjHdki?

Trojan.Heur2.VP2.di1aaGXjHdki removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X