Trojan-Spy.MSIL.Heye.gb malicious file

Malware Removal

The Trojan-Spy.MSIL.Heye.gb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What Trojan-Spy.MSIL.Heye.gb virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Steals private information from local Internet browsers
  • Exhibits behavior characteristic of iSpy Keylogger
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Spy.MSIL.Heye.gb?


File Info:

crc32: E7A4BA0E
md5: 5bfc97beabafded39f9ed2b5e805ee34
name: filop.exe
sha1: e44f1d0b56839e6b3c0e6413523458d5914cc699
sha256: 12701b77d2b63c4ffe10eb9b726929eb0c99d6c1e37d1dda2d95cfa883020efc
sha512: 7cc33e4d5263e43516e64f2bf4d9be00759c14ac8408b5d1c7e8a98642098cdff3680016da91e6a5d078ac77c33b5d6e104acace1b16a4534cabc35ed8f9b16c
ssdeep: 49152:kh+ZkldoPKi2aeKO+K3Hg6+yshqy/Jbg3j/TNrzmSm5:V2cPKi+1d+ysLK9qS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Trojan-Spy.MSIL.Heye.gb also known as:

MicroWorld-eScanTrojan.GenericKD.33223216
FireEyeGeneric.mg.5bfc97beabafded3
McAfeeArtemis!5BFC97BEABAF
CylanceUnsafe
AegisLabTrojan.Win32.AutoIT.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderTrojan.GenericKD.33223216
K7GWTrojan ( 005604fe1 )
K7AntiVirusTrojan ( 005604fe1 )
TrendMicroTROJ_GEN.R002C0DBB20
F-ProtW32/AutoIt.KF.gen!Eldorado
SymantecPacked.Generic.548
APEXMalicious
AvastScript:SNH-gen [Trj]
GDataTrojan.GenericKD.33223216
KasperskyTrojan-Spy.MSIL.Heye.gb
AlibabaTrojan:Win32/AutoitU.ali2000008
ViRobotTrojan.Win32.Z.Autoit.2077184
RisingTrojan.Obfus/Autoit!1.C045 (CLASSIC)
Endgamemalicious (high confidence)
EmsisoftTrojan.GenericKD.33223216 (B)
F-SecureTrojan.TR/Autoit.xappp
DrWebTrojan.Siggen9.10730
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan-Spy.Keylogger.AgentTesla
CyrenW32/AutoIt.KF.gen!Eldorado
MaxSecureTrojan.Malware.300983.susgen
AviraTR/Autoit.xappp
MAXmalware (ai score=100)
ArcabitTrojan.Generic.D1FAF230
ZoneAlarmTrojan-Spy.MSIL.Heye.gb
MicrosoftTrojan:Win32/AutoitInject.BH!MTB
AhnLab-V3Trojan/AU3.Wacatac.S1079
ALYacTrojan.Agent.HawkEye
Ad-AwareTrojan.GenericKD.33223216
MalwarebytesTrojan.MalPack.AutoIt
PandaTrj/CI.A
ZonerTrojan.Win32.87579
ESET-NOD32a variant of Win32/Injector.Autoit.FBR
TrendMicro-HouseCallTROJ_GEN.R002C0DBB20
TencentWin32.Trojan.Agent.Auto
YandexTrojan.AvsArher.bS9LKk
eGambitUnsafe.AI_Score_99%
FortinetAutoIt/Injector.EZY!tr
AVGScript:SNH-gen [Trj]
Cybereasonmalicious.b56839
Paloaltogeneric.ml
Qihoo-360Generic/HEUR/QVM10.2.2DE3.Malware.Gen

How to remove Trojan-Spy.MSIL.Heye.gb?

Trojan-Spy.MSIL.Heye.gb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment