Malware

VBA.Heur2.Amphitryon.217.Gen malicious file

Malware Removal

The VBA.Heur2.Amphitryon.217.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VBA.Heur2.Amphitryon.217.Gen virus can do?

  • The office file contains a macro
  • The office file contains a macro with auto execution
  • The office file contains a macro with suspicious strings

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine VBA.Heur2.Amphitryon.217.Gen?


File Info:

crc32: 9D77A19B
md5: 909496cea08b69ff4a51c7022e730c1f
name: upload_file
sha1: 25a77d5624728c447433eb2d1902741707871949
sha256: 787a31e76d10db361856a54d27fd085d692dad33762b5378e032d606ffeaef20
sha512: d4096b275906c71911d683ccc39d4922758f492d62fbffc1816a57516eba15b1f1dd3ea541d3e10c304b037781d30a0f721c04b0d22b2f3641ebfa3057f00d63
ssdeep: 384:HemYT2ZfkYnz5mj2sor71ywVKg4QITMaTPJ:+1Ef5z0js71Sg7Igg
type: Microsoft Excel 2007+

Version Info:

0: [No Data]

VBA.Heur2.Amphitryon.217.Gen also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanVBA.Heur2.Amphitryon.217.Gen
FireEyeVBA.Heur2.Amphitryon.217.Gen
SangforMalware
BitDefenderVBA.Heur2.Amphitryon.217.Gen
SymantecISB.Downloader!gen48
GDataVBA.Heur2.Amphitryon.217.Gen
KasperskyHEUR:Trojan-Downloader.Script.Generic
AlibabaTrojanDownloader:VBA/MalDoc.ali1000103
NANO-AntivirusTrojan.Ole2.Vbs-heuristic.druvzi
RisingTrojan.Runner/VBA!1.CA4E (CLASSIC)
Ad-AwareVBA.Heur2.Amphitryon.217.Gen
F-SecureHeuristic.HEUR/Macro.Downloader.MRAX.Gen
SentinelOneDFI – Suspicious OPENXML
AviraW97M/Dldr.Agent.cpdls
MAXmalware (ai score=83)
MicrosoftTrojanDownloader:O97M/Obfuse.BK!MTB
ArcabitVBA.Heur2.Amphitryon.217.Gen
ZoneAlarmHEUR:Trojan-Downloader.Script.Generic
CynetMalicious (score: 85)
ZonerProbably Heur.W97DownloaderA
IkarusTrojan-Downloader.VBA.Agent
FortinetVBA/Agent.HEF!tr.dldr
AVGVBA:Downloader-GJG [Trj]
Qihoo-360Generic/Trojan.Downloader.251

How to remove VBA.Heur2.Amphitryon.217.Gen?

VBA.Heur2.Amphitryon.217.Gen removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment