Trojan

Trojan.Heur3.LPT.9mKfaaZlKEaib removal

Malware Removal

The Trojan.Heur3.LPT.9mKfaaZlKEaib is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur3.LPT.9mKfaaZlKEaib virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Heur3.LPT.9mKfaaZlKEaib?


File Info:

name: 969F1474D8D964E200CC.mlw
path: /opt/CAPEv2/storage/binaries/e679ebb3dd008190af21a52a730e31eaa75b15cbdff5d529f1412c982f8ecfd7
crc32: C7AB6BD1
md5: 969f1474d8d964e200cc7f9fa441f230
sha1: cd386a4f63c414b36d7695a42f1ce5fba0880668
sha256: e679ebb3dd008190af21a52a730e31eaa75b15cbdff5d529f1412c982f8ecfd7
sha512: 1282e09231b34d8315afb81cc0b5d57ccfd27dad810c8a055dea42cf3566b93d8ebba93d6cc7587ca3c42003053a6aaebd51b1b3aca0a19654a678afdbc90968
ssdeep: 24576:yZ83ETqMeoaKmakGxMxB2A2nRSavr5iqYMtvfHk:ymEsURLEexrgg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1222513C5BBD88D5DDD1E02B984F3E9358429FAC80CF60A0F26EC3D5A7F679912C8A055
sha3_384: 15144125e5e9216702ff60c2f240ac5a13f6380fdea8638f828134221137d357d2acc4f6c0b8d638c2c2cdd986b92b9b
ep_bytes: 60be00a065008dbe0070daffc787106c
timestamp: 2019-08-02 20:05:20

Version Info:

FileVersion: 6.1.7600.16385
InternalName: flashplayer32
LegalCopyright: Adobe Inc.
ProductVersion: 6.1.7600.16385
ProgramID: 6.1.7600.16385
FileDescription: Adobe Flash Player
ProductName: Adobe Flash Player
Translation: 0x0409 0x04e4

Trojan.Heur3.LPT.9mKfaaZlKEaib also known as:

LionicTrojan.Win32.Vobfus.4!c
MicroWorld-eScanGen:Trojan.Heur3.LPT.9mKfaaZlKEaib
McAfeeArtemis!969F1474D8D9
CylanceUnsafe
SangforTrojan.Win32.Vobfus.gen
K7AntiVirusTrojan-Downloader ( 005542d31 )
AlibabaTrojanSpy:Win32/Vobfus.c0657c59
K7GWTrojan-Downloader ( 005542d31 )
Cybereasonmalicious.4d8d96
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Spy.Banker.AEJW
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Vobfus.gen
BitDefenderGen:Trojan.Heur3.LPT.9mKfaaZlKEaib
NANO-AntivirusTrojan.Win32.Vobfus.fusojf
AvastWin32:Malware-gen
Ad-AwareGen:Trojan.Heur3.LPT.9mKfaaZlKEaib
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0GGR21
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGen:Trojan.Heur3.LPT.9mKfaaZlKEaib
EmsisoftGen:Trojan.Heur3.LPT.9mKfaaZlKEaib (B)
GDataGen:Trojan.Heur3.LPT.9mKfaaZlKEaib
AviraTR/Vobfus.olrtm
ArcabitTrojan.Heur3.LPT.9mKfaaZlKEaib
MicrosoftTrojan:Win32/Occamy.CE6
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.Generic.C2064350
BitDefenderThetaAI:Packer.8881B62A21
ALYacGen:Trojan.Heur3.LPT.9mKfaaZlKEaib
VBA32TScope.Trojan.Delf
TrendMicro-HouseCallTROJ_GEN.R002C0GGR21
TencentWin32.Trojan.Vobfus.Hufv
YandexTrojan.Vobfus!97ldcBkbTAc
IkarusTrojan-Crypt.Xpack
FortinetW32/Vobfus!tr
AVGWin32:Malware-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.2015567.susgen

How to remove Trojan.Heur3.LPT.9mKfaaZlKEaib?

Trojan.Heur3.LPT.9mKfaaZlKEaib removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment