Categories: Trojan

About “Trojan.Hide.Heur” infection

The Trojan.Hide.Heur is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Hide.Heur virus can do?

Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine Trojan.Hide.Heur?


File Info:
crc32: A69DF649md5: 735745a952473faf5306551a24c95050name: 735745A952473FAF5306551A24C95050.mlwsha1: 33033eafc110a7fbff26be5b12e756564eca032bsha256: b9856de14002bafec77dd5337e2de2cc95ce795edc2a4a0a00f055d438f3abd8sha512: 8ed8ffda2398498c80b012c4dceddf47240cb1de43404eebe4545ce625198f549f6cec114fc9d0a515733700ab9bed3b00cba2fa19a719515c50b7741bc8dd5fssdeep: 12288:6vuX/f3+Fso9uLSTG7B9+TdVUOzUUOyCE1T9W:TX3+9mqG7L+xV99h31ktype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
Info: x414x430x43dx43dx44bx439 x43fx430x43ax435x442 x431x44bx43b x441x43ex437x434x430x43d x441 x43fx43ex43cx43ex449x44cx44e SFX CreatorLegalCopyright: DSGameFileVersion: 1.0.0.0CompanyName: DSGameProductName: CleanZFileDescription: Clean your PCTranslation: 0x0419 0x04e3

Trojan.Hide.Heur also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Trojan.GenericKD.40419019
ALYac	Trojan.GenericKD.40419019
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0053bb151 )
BitDefender	Trojan.GenericKD.40419019
K7GW	Trojan ( 0053bb151 )
Cybereason	malicious.952473
Arcabit	Trojan.Generic.D268BECB
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Trojan:Win32/Diztakun.21510338
NANO-Antivirus	Trojan.Win32.LockScreen.fgypyb
Tencent	Win32.Trojan.Generic.Afrj
Ad-Aware	Trojan.GenericKD.40419019
Sophos	Mal/Generic-S
Comodo	Malware@#1stmsqbo8ffbv
F-Secure	Trojan.TR/Ransom.avizb
DrWeb	Trojan.MulDrop9.2723
McAfee-GW-Edition	BehavesLike.Win32.Ransom.gc
FireEye	Trojan.GenericKD.40419019
Emsisoft	Trojan.GenericKD.40419019 (B)
Jiangmin	Trojan.Generic.arosj
Avira	TR/Ransom.avizb
MAX	malware (ai score=99)
Antiy-AVL	Trojan[RemoteAdmin]/Win32.NetCat
Microsoft	Trojan:Win32/Vigorf.A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.GenericKD.40419019
Cynet	Malicious (score: 85)
AhnLab-V3	Malware/Win32.Generic.C2705677
McAfee	Artemis!735745A95247
VBA32	Trojan.Hide.Heur
Malwarebytes	Trojan.Script
Panda	Trj/CI.A
ESET-NOD32	multiple detections
Rising	Trojan.Azden!8.F0E3 (CLOUD)
Yandex	Trojan.Agent!3ZGVKC89R+4
Ikarus	Trojan.Win32.LockScreen
Fortinet	W32/Generic!tr
BitDefenderTheta	Gen:NN.ZelphiF.34590.dG0@amN5nNei
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
Qihoo-360	Win32/Trojan.243