How to remove “Trojan.MalPack.PEPack”?

The Trojan.MalPack.PEPack is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.MalPack.PEPack virus can do?

Unconventionial language used in binary resources: Korean
Anomalous binary characteristics

How to determine Trojan.MalPack.PEPack?


File Info:
crc32: 3D11DDD3
md5: 1226406babc610c2b4e3cc35599dfb35
name: main.exe
sha1: 094bc8b88a25e953158ac4a329081d5de0bbc67d
sha256: 3de7233beb0a393455d8aa845314640774a00648ff89cc2c335dd42bd7a56249
sha512: 43b8ad20a298e928194515d88b1863e4452bdbd9668d335e9aa3f6220c54803b1fa47835a016165b44c88d62aa5e52f8273e7c12fbf91d64523450b1d02b55b1
ssdeep: 24576:DDIMkNIqvOwyMYv1xukrgOrnlLRIK6xuOzPl6fMn/oEEPurAjFpRtB77BgHtRku:HIMkanMcxXtdzfsgur4FfyNRku
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: DarksTeam
InternalName: main.exe
FileVersion: 97d99i
CompanyName: DarksTeam
PrivateBuild: 
LegalTrademarks: 
Comments: www.DarksTeam.NET
ProductName: main.exe
SpecialBuild: www.DarksTeam.NET
ProductVersion: 1, 0, 0, 1
FileDescription: www.DarksTeam.NET
OriginalFilename: main.exe
Translation: 0x0412 0x04b0

Trojan.MalPack.PEPack also known as:

FireEye	Generic.mg.1226406babc610c2
Qihoo-360	Generic/HEUR/QVM19.1.C287.Malware.Gen
McAfee	GenericRXAA-FQ!1226406BABC6
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.88a25e
APEX	Malicious
ViRobot	Trojan.Win32.Z.Bifrose.5132800
AegisLab	Virus.Win32.Nimnul.lf2q
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazoGldGxnGoWy6UyDp7uu9Xh)
Endgame	malicious (high confidence)
Comodo	Packed.Win32.PePatch.d01@48x93y
F-Secure	Heuristic.HEUR/AGEN.1034216
DrWeb	BackDoor.BlackHole.53145
Zillya	Backdoor.Bifrose.Win32.87747
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.rz
Trapmine	suspicious.low.ml.score
Sophos	Troj/HkMain-CB
Ikarus	Virus.Win32.Sality
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1034216
Antiy-AVL	Trojan[Backdoor]/Win32.Bifrose
Microsoft	Trojan:Win32/Occamy.C
Acronis	suspicious
VBA32	Backdoor.Bifrose
Malwarebytes	Trojan.MalPack.PEPack
SentinelOne	DFI – Malicious PE
Fortinet	W32/HkMain.CB!tr
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.MalPack.PEPack?

Trojan.MalPack.PEPack removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X