Trojan.Win32.SuperThreat.mf removal

The Trojan.Win32.SuperThreat.mf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.SuperThreat.mf virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Win32.SuperThreat.mf?


File Info:
name: 1AAF0BC8EE7F68021832.mlw
path: /opt/CAPEv2/storage/binaries/9c06fe70e259f1dc23021a354a3ff84590b6ce0152f28cbfc27064470d33a3b0
crc32: 722FC779
md5: 1aaf0bc8ee7f68021832123d2cff12c4
sha1: 67aea1c8aca71e9ca86a7419f283e9fffe3140a4
sha256: 9c06fe70e259f1dc23021a354a3ff84590b6ce0152f28cbfc27064470d33a3b0
sha512: 6261209c8588f38addc71012edfedca8ee52306e1a02ba2bc44f109ea4a5f1d6be99cab752ccbb22585740970f30160964ff102000ff82fca77a5e012d6a4f48
ssdeep: 1536:ZWGxs9kGdYk8wO4Cnu0B2O/jXbhoba0JLx7GCC4I4PP6PcvPnyp3aOTotXQ:wGfGdYSCn0OPhobv1GN86PcvgKOEtg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17A84CA02432220A7E65434B5C05A7B8A06906FF93DA7E536FD157406FA72BCA4E335FE
sha3_384: e6a1a7ff833faa729b8b36bef0d75dc5ead1282dab0277b46817b0b8b1692eb6520a9db25485de840fc9f4dbdd105794
ep_bytes: 558bec6affe9df610d0000000000509f
timestamp: 2002-04-13 01:49:44

Version Info:
CompanyName: Adobe Systems Incorporated
FileDescription: Adobe Reader 8.0
FileVersion: 8.0.0.2006102300
LegalCopyright: Copyright 1984-2006 Adobe Systems Incorporated and its licensors. All rights reserved.
ProductName: Adobe Reader
ProductVersion: 8.0.0.2006102300
OriginalFilename: AcroRd32.exe
Translation: 0x0409 0x04e4

Trojan.Win32.SuperThreat.mf also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Win32.Worm.Klez.DAR
ClamAV	Win.Trojan.Elkern-2
FireEye	Generic.mg.1aaf0bc8ee7f6802
ALYac	Win32.Worm.Klez.DAR
Malwarebytes	Worm.Klez
VIPRE	Win32.Worm.Klez.DAR
K7AntiVirus	Trojan ( 0000409e1 )
K7GW	Trojan ( 0000409e1 )
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Worm.Klez.b
Cyren	W32/Klez.H@mm (corrupted)
Symantec	W32.Klez.H@mm
ESET-NOD32	a variant of Win32/Klez
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.SuperThreat.mf
BitDefender	Win32.Worm.Klez.DAR
Avast	Win32:Injected-AZ
Tencent	Trojan.Win32.Klez.b
F-Secure	Malware.W32/Elkern.C
DrWeb	Win32.HLLM.Klez.4
Zillya	Worm.Klez.Win32.1
TrendMicro	WORM_KLEZ.GEN
McAfee-GW-Edition	BehavesLike.Win32.Klez.fm
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Suspicious PE
Jiangmin	I-Worm/Klez.h
Avira	W32/Elkern.C
Antiy-AVL	Worm[Email]/Win32.Klez.h
Arcabit	Win32.Worm.Klez.DAR
ZoneAlarm	Trojan.Win32.SuperThreat.mf
GData	Win32.Worm.Klez.H
Google	Detected
BitDefenderTheta	Gen:NN.ZexaF.36250.xu0@au!iLCli
MAX	malware (ai score=82)
VBA32	MalwareScope.Worm.Klez.1
Cylance	unsafe
Panda	Trj/Genetic.gen
Zoner	Worm.Win32.Klez.32858
TrendMicro-HouseCall	WORM_KLEZ.GEN
Rising	Worm.Klez!1.A1CB (CLASSIC)
Yandex	Trojan.GenAsa!URVqVkT3TU0
Ikarus	Trojan.Win32.Crypt
MaxSecure	Worm.W32.Klez.h
Fortinet	W32/Wacatac.B!tr
AVG	Win32:Injected-AZ
Cybereason	malicious.8ee7f6
DeepInstinct	MALICIOUS

How to remove Trojan.Win32.SuperThreat.mf?

Trojan.Win32.SuperThreat.mf removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X