What is “Trojan:Win32/Gepys.PVD!MTB”?

The Trojan:Win32/Gepys.PVD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Gepys.PVD!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Gepys.PVD!MTB?


File Info:
name: 71A87C88A140E820CB60.mlw
path: /opt/CAPEv2/storage/binaries/6c273053d1b8c3f5e0ed906fa218e06a6f788152baa3f2826031f71a49b134dc
crc32: F1D7E200
md5: 71a87c88a140e820cb60faadfc3ddde8
sha1: c59f980e7d9b44726b0bff5413d693d0bdf32816
sha256: 6c273053d1b8c3f5e0ed906fa218e06a6f788152baa3f2826031f71a49b134dc
sha512: 19b38cbc594dd9eb8dc511c4d6fbe9d32516d1553e79d6430451993ebe01f1a4f096c82753b32cc4b20499789cb081772c4aa4fadef19c3a16c1ee292e64ca1c
ssdeep: 1536:JBBHjvjSHlHPUoQWJAn7W+izHlcj4p5LxOzAfGFmGI5zN+MmJz5lbQpRKYS9PiX3:/BHjbSlHPAnC55cQDkjmGtlD2Y5jm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192E3BF1277E4D896E0216F308983D7B90766FE618A65435772D03F0FBDB7744AE22B22
sha3_384: f2283f72709c4d161b139e5bec4a3d9ef655a979e8f99050674b418cbd0106c44d23f41c479b807bbafcb19b38fd138b
ep_bytes: 00000000000000000000000000000000
timestamp: 2007-08-14 08:27:02

Version Info:
0: [No Data]

Trojan:Win32/Gepys.PVD!MTB also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
Skyhigh	BehavesLike.Win32.Generic.cm
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005a9afa1 )
K7GW	Trojan ( 005a9afa1 )
Cybereason	malicious.e7d9b4
Baidu	Win32.Trojan.Kryptik.apo
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.ZBot-7488186-1
Avast	Win32:Kryptik-LTE [Trj]
Tencent	Trojan.Win32.Kryptik.hck
Sophos	Generic ML PUA (PUA)
Antiy-AVL	Trojan/Win32.Gepys
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/Gepys.PVD!MTB
GData	Win32.Trojan.Agent.D48YAK
Google	Detected
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH01AK24
Rising	Dropper.Gepys!8.15D (TFE:1:6iJe98A3IOS)
SentinelOne	Static AI – Suspicious PE
AVG	Win32:Kryptik-LTE [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan:Win32/Gepys.PVD!MTB?

Trojan:Win32/Gepys.PVD!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X