Trojan.Win32.Hesv.cszl malicious file

The Trojan.Win32.Hesv.cszl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Hesv.cszl virus can do?

Reads data out of its own binary image
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Win32.Hesv.cszl?


File Info:
name: FE8783CF2937097F8F63.mlw
path: /opt/CAPEv2/storage/binaries/c9545d4820d0d8a29d043593333ab6ea1d3bef4040c5624663aa67bfef44f3af
crc32: 0F5B7A6F
md5: fe8783cf2937097f8f63f181498cec08
sha1: 11c373645e8960e326781b200510b6802e4be575
sha256: c9545d4820d0d8a29d043593333ab6ea1d3bef4040c5624663aa67bfef44f3af
sha512: 4306f0bbc7cec88ae957f0b597c519fc40157ba39c917df93b253b7466943ced9976f8062cb230c745963a5ed1464fe343b4226472923c38e93b1234eb80716e
ssdeep: 768:3m5jJubO7qjFgJbsy2NbjGAX99gFH9mSuA9LuJG02G1tR9wGUQXhzrN/:36qjFQspNbjTN9gt9oA097+vQR9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FE438C8253945EA5EDB30730941BDE316512FC626D9142AF3CC8BA1B7FB768384A271F
sha3_384: 69cadfe4f43faa34309c838c310c800639f3408da8d3ee100fd15f13a9de31a98352eb0ca98c0d998e0719dbece364d9
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-10-20 15:36:28

Version Info:
Translation: 0x0000 0x04b0
CompanyName: Delivered by Citrix
FileDescription: Microsoft Office Excel 2007
FileVersion: 1.0.0.0
InternalName: MicrosoftOfficeExcel2007.exe
LegalCopyright: Citrix Systems, Inc. 2014
OriginalFilename: MicrosoftOfficeExcel2007.exe
ProductName: Microsoft Office Excel 2007 Launcher
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan.Win32.Hesv.cszl also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Hesv.4!c
Skyhigh	Artemis!Trojan
McAfee	Artemis!FE8783CF2937
Cylance	unsafe
Alibaba	Trojan:Win32/Hesv.9d2f413c
APEX	Malicious
Kaspersky	Trojan.Win32.Hesv.cszl
Rising	Trojan.Hesv!8.EDB6 (CLOUD)
Trapmine	suspicious.low.ml.score
Jiangmin	Trojan.Hesv.ikj
Google	Detected
Varist	W32/Hesv.A.gen!Eldorado
Antiy-AVL	Trojan/Win32.Hesv
Kingsoft	Win32.Trojan.Hesv.cszl
ZoneAlarm	Trojan.Win32.Hesv.cszl
AhnLab-V3	Trojan/Win32.RL_Bcex.R279897
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.223300722.susgen

How to remove Trojan.Win32.Hesv.cszl?

Trojan.Win32.Hesv.cszl removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X