Trojan

About “Trojan.Heur3.LPT.7nKfa4q0Ijdib” infection

Malware Removal

The Trojan.Heur3.LPT.7nKfa4q0Ijdib is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur3.LPT.7nKfa4q0Ijdib virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Heur3.LPT.7nKfa4q0Ijdib?


File Info:

name: 0E949890816A2DAF1118.mlw
path: /opt/CAPEv2/storage/binaries/862d0d462f4ab0d79cbff27a2bc4e28988462532fb82255dfe0f8530c6ec58a7
crc32: 0D15199F
md5: 0e949890816a2daf1118bc4d5f119053
sha1: 916236b543f31c2e32a8f5ad09372d697e2152d5
sha256: 862d0d462f4ab0d79cbff27a2bc4e28988462532fb82255dfe0f8530c6ec58a7
sha512: 872874997ffd368a594fa7c247fcdadbe6c11edc0ccc6d110332bb86ed79071c466d781355103f2ae301c988f391ccc566619025d4fa7025c820a6803f66e26e
ssdeep: 24576:BaqUcOrQ4EQff/3UvrX6lW6xu1TeuSKjoSO9ha/ZtEz2m+pL35VJdH0i88034ILV:BTUcOjHcKGTFRoSgKuEpL35AFfd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1439512C1E6C71672EECA3A77055C023F47F76153D0D08A9EDE822614EA8AC757F244EA
sha3_384: 0b46628a5693814c7547286801101e417c70d7b896b793b9f0c1b239ffbd54dac6620f089a57183f0f4356a227d0ded6
ep_bytes: 60be00d094018dbe0040abfe5783cdff
timestamp: 2017-10-10 10:36:51

Version Info:

FileDescription: SteDBCreate
FileVersion: 1.0.0.0
ProgramID: com.embarcadero.SteDBCreate
ProductName: SteDBCreate
ProductVersion: 1.0.0.0
Translation: 0x0409 0x04e4

Trojan.Heur3.LPT.7nKfa4q0Ijdib also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Nkfb.4!c
MicroWorld-eScanGen:Trojan.Heur3.LPT.7nKfa4q0Ijdib
FireEyeGen:Trojan.Heur3.LPT.7nKfa4q0Ijdib
McAfeeArtemis!0E949890816A
Cylanceunsafe
SangforTrojan.Win32.Agent.Vciq
Cybereasonmalicious.0816a2
BitDefenderThetaAI:Packer.2A931EC121
APEXMalicious
BitDefenderGen:Trojan.Heur3.LPT.7nKfa4q0Ijdib
ViRobotTrojan.Win.Z.Agent.2030080.C
EmsisoftGen:Trojan.Heur3.LPT.7nKfa4q0Ijdib (B)
VIPREGen:Trojan.Heur3.LPT.7nKfa4q0Ijdib
McAfee-GW-EditionBehavesLike.Win32.InstallMonster.tc
Trapminemalicious.moderate.ml.score
GDataGen:Trojan.Heur3.LPT.7nKfa4q0Ijdib
Antiy-AVLGrayWare/Win32.Ymacco
ArcabitTrojan.Heur3.LPT.7nKfa4q0Ijdib
MicrosoftProgram:Win32/Ymacco.AA86
AhnLab-V3Malware/Win32.Generic.C1923764
ALYacGen:Trojan.Heur3.LPT.7nKfa4q0Ijdib
MAXmalware (ai score=99)
MalwarebytesMalware.Heuristic.1003
TrendMicro-HouseCallTROJ_GEN.R002H09EJ23
RisingTrojan.Zpevdo!8.F912 (CLOUD)
MaxSecureTrojan.Malware.300983.susgen
DeepInstinctMALICIOUS

How to remove Trojan.Heur3.LPT.7nKfa4q0Ijdib?

Trojan.Heur3.LPT.7nKfa4q0Ijdib removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment