Trojan.Win32.Hesv.fvsb removal tips

The Trojan.Win32.Hesv.fvsb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Hesv.fvsb virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Trojan.Win32.Hesv.fvsb?


File Info:
name: B3642E13D510C71753D8.mlw
path: /opt/CAPEv2/storage/binaries/8ed8de5f985d3946f6d4946f64e85b9eeaa76f4fd2e677fc052520ebfb1a7a86
crc32: 6503A2A0
md5: b3642e13d510c71753d84f2028b2a63c
sha1: 96ac70e122e6cdb1848173fff9a439b85850fbb3
sha256: 8ed8de5f985d3946f6d4946f64e85b9eeaa76f4fd2e677fc052520ebfb1a7a86
sha512: 81ee0583b67c7074b2fefe8aa4b39c695e1f94f6f321b4b542a912585ed47ce6a4ab4121b74d62db6db78117f720c2570ce438e1d0c27f2a50ee0ad9f17d5ed1
ssdeep: 3072:d630thKdTAodJza64TRnltulOuQuT1XwQVXz5uU0OGsLo3XEqfXz:d0ZETpYzAjLsLcf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12354F60373EA941EE8B277B05EFAD355C637BD299633C21F3284195F5DA1A405E223B2
sha3_384: 9ca9867530b4e22ec3570986007e2dd62d5f69f60b201fa25865f0e8c42cf19506831978333c67200c9789c6d8f646ac
ep_bytes: 60be001047008dbe0000f9ff57eb0b90
timestamp: 2012-01-29 21:32:28

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Trojan.Win32.Hesv.fvsb also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Autoit.mBpQ
MicroWorld-eScan	Gen:Variant.Zusy.411698
ClamAV	Win.Malware.Zusy-9956636-0
FireEye	Generic.mg.b3642e13d510c717
ALYac	Gen:Variant.Zusy.411698
Cylance	Unsafe
VIPRE	Gen:Variant.Zusy.411698
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 700000111 )
Alibaba	Trojan:Win32/Hesv.332d49c7
K7GW	Trojan ( 700000111 )
Cybereason	malicious.3d510c
Baidu	Win32.Trojan.AutoIt.a
Cyren	W32/S-79628cd6!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Hesv.fvsb
BitDefender	Gen:Variant.Zusy.411698
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Hesv.Xdkl
Ad-Aware	Gen:Variant.Zusy.411698
Sophos	ML/PE-A
Comodo	Packed.Win32.MUPX.Gen@24tbus
Zillya	Trojan.Hesv.Win32.5585
TrendMicro	TROJ_GEN.R002C0WK422
McAfee-GW-Edition	BehavesLike.Win32.BadFile.dt
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Zusy.411698 (B)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.PSE.1K78EN9
Jiangmin	Trojan.Hesv.dnb
Avira	HEUR/AGEN.1214975
Antiy-AVL	Trojan/Generic.ASMalwS.3C54
Arcabit	Trojan.Zusy.D64832
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
AhnLab-V3	HEUR/Fakon.mwf.X1381
Acronis	suspicious
McAfee	Artemis!B3642E13D510
MAX	malware (ai score=81)
TrendMicro-HouseCall	TROJ_GEN.R002C0WK422
Rising	Malware.FakeFolder/ICON!1.6AA9 (CLASSIC)
Ikarus	Trojan-Downloader.Win32.Genome
MaxSecure	Trojan.Malware.184646616.susgen
Fortinet	W32/ULPM.16C0!tr
BitDefenderTheta	Gen:NN.ZexaF.34754.rm0@aeE6qtli
AVG	Win32:Malware-gen

How to remove Trojan.Win32.Hesv.fvsb?

Trojan.Win32.Hesv.fvsb removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X