Categories: Trojan

TrojanDropper:Win32/Gepys!pz removal tips

The TrojanDropper:Win32/Gepys!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Gepys!pz virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Collects information to fingerprint the system
Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanDropper:Win32/Gepys!pz?


File Info:
name: 7CFF96B513B06F840177.mlwpath: /opt/CAPEv2/storage/binaries/6020f601f9554e1d796ef0adaa90900f6a5f92e4951e70bd12891a9e8f20bfb3crc32: 5C34058Cmd5: 7cff96b513b06f8401773c7598fd7fffsha1: ee937540bcfc4dda92d58fbeb9536380afecd134sha256: 6020f601f9554e1d796ef0adaa90900f6a5f92e4951e70bd12891a9e8f20bfb3sha512: d0b61510a73c94b312e53bc9582d33c5ba33c5387a7eddea817a9799636a1eb8235bc4a53420a699cd41ba5aab0e640834427adcdcb85a71901bd73c0db130aassdeep: 3072:dCrcivS3fWNK3VgwRgZu1kHtiV1xRXHfc+fSZnACf40oYk1XQtyp2MswTRn/LFwk:dC4zeGgwKw1c43Rk+xaJkytg2MBTR/rptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1982412C0948025C2EA227EB9FB9F87D7E37517612702002DAE6DE39E4C75249BE2FD11sha3_384: 966f015e7cd0a47472086e65513cb77dfe6c3e9ef2a253bbdbf50d2b8f1211042286d8597399eea06ca32b483800dfa5ep_bytes: 60be15d040008dbeeb3fffff5783cdfftimestamp: 2013-05-06 06:19:43
Version Info:
0: [No Data]

TrojanDropper:Win32/Gepys!pz also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Tibick.ls3A
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.GenericKDZ.94580
ClamAV	Win.Trojan.Ulise-6981985-0
FireEye	Generic.mg.7cff96b513b06f84
CAT-QuickHeal	TrojanDropper.Gepys.A
Skyhigh	BehavesLike.Win32.Generic.dc
McAfee	GenericRXAA-AA!7CFF96B513B0
Cylance	unsafe
Zillya	Trojan.Generic.Win32.621148
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanDropper:Win32/Gepys.7a4f3371
K7GW	Trojan ( 0051918e1 )
K7AntiVirus	Trojan ( 0051918e1 )
BitDefenderTheta	Gen:NN.ZexaF.36744.nmJfaiuIUChi
Symantec	Infostealer
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Injector.AGDG
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.ShipUp.gen
BitDefender	Trojan.GenericKDZ.94580
NANO-Antivirus	Trojan.Win32.Redirect.cqjqga
Avast	Win32:Malware-gen
Tencent	Trojan.Win32.Shipup.kj
Emsisoft	Trojan.GenericKDZ.94580 (B)
Baidu	Win32.Trojan.Injector.jn
F-Secure	Heuristic.HEUR/AGEN.1331473
DrWeb	Trojan.Redirect.154
VIPRE	Trojan.GenericKDZ.94580
TrendMicro	TROJ_KRYPTO.SMAX
Trapmine	malicious.high.ml.score
Sophos	Troj/Agent-BBAN
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.17CUZDC
Jiangmin	Trojan.Generic.czewr
Google	Detected
Avira	HEUR/AGEN.1331473
Antiy-AVL	Trojan[Dropper]/Win32.Gepys
Kingsoft	malware.kb.b.986
Xcitium	TrojWare.Win32.Toga.C@7tr8p9
Arcabit	Trojan.Generic.D17174
ZoneAlarm	HEUR:Trojan.Win32.ShipUp.gen
Microsoft	TrojanDropper:Win32/Gepys!pz
Varist	W32/Agent.BJA.gen!Eldorado
AhnLab-V3	Trojan/Win32.Krypto.R258377
Acronis	suspicious
ALYac	Trojan.GenericKDZ.94580
MAX	malware (ai score=81)
VBA32	BScope.Trojan.Carberp.2013
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_KRYPTO.SMAX
Rising	Dropper.Gepys!8.15D (TFE:5:LtSslMHJxnE)
Yandex	Trojan.GenAsa!R1YGpcfwID0
Ikarus	Trojan-Downloader.Win32.Dofoil
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Kryptik.AYTT!tr
AVG	Win32:Malware-gen
Cybereason	malicious.0bcfc4
DeepInstinct	MALICIOUS