Trojan.Heur2.ZGY.1 malicious file

The Trojan.Heur2.ZGY.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Heur2.ZGY.1 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempted to write directly to a physical drive
• Anomalous binary characteristics

How to determine Trojan.Heur2.ZGY.1?

File Info:
name: C0BA205F153FAC606D20.mlw
path: /opt/CAPEv2/storage/binaries/385b0e94aec47498803a19d8e5fa046cd7d908aa7094abb75f21e03e04dfdc60
crc32: 92E6ABEE
md5: c0ba205f153fac606d203d0787d905c6
sha1: 3295e739562bccd7085509a14a549492c2ea007b
sha256: 385b0e94aec47498803a19d8e5fa046cd7d908aa7094abb75f21e03e04dfdc60
sha512: e8c80e94da9026d7d00eee6c321a5b115df15ab9f90d28703f84b5de7ff74856ddc80ffadc86ea19b63b0b5f216e7f2e937eb80f553563eb2df4743387d7baee
ssdeep: 3072:m98yOPv1FHRJAnld1JXHRaFfZ2b/96HM0XUGXU2Fo21s/xxqrbfAseFqFjob1tE3:DX1FH/evRofYnVDnqr8seU8b1tFNemI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T197342359BBAA3F6EFA661BB2467186DF519BF4DCB446837CD2E434BF1C0F14490018A2
sha3_384: 2e7a72e0a336c3cc9457b93d83f8ce95bed9e9a1dd8cd50284e34ba422d41f10f873b9cbb1043cd1c648d64e07953348
ep_bytes: 6801d04300e801000000c3c320c06809
timestamp: 2011-07-24 20:51:11

Version Info:
Translation: 0x0409 0x04b0
CompanyName:  
LegalCopyright:  
LegalTrademarks:  
ProductName:  
FileVersion: 88.44.0022
ProductVersion: 88.44.0022
InternalName: DeV-PoinT1e
OriginalFilename: DeV-PoinT1e.exe

Trojan.Heur2.ZGY.1 also known as:

How to remove Trojan.Heur2.ZGY.1?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.