Virus

Virus.Win32.HLLP.DeTroie malicious file

Malware Removal

The Virus.Win32.HLLP.DeTroie is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus.Win32.HLLP.DeTroie virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Virus.Win32.HLLP.DeTroie?


File Info:

name: EB37BF7337035B04E8EF.mlw
path: /opt/CAPEv2/storage/binaries/5d3e6353f49e204e0541ae3e1439f9eb46fe801278ce42e7ffb89bc1b8c70e20
crc32: 7D5E3B22
md5: eb37bf7337035b04e8efcacae84b233e
sha1: 996e5f5acbe882c93b5583f4932fbbe4d981c17d
sha256: 5d3e6353f49e204e0541ae3e1439f9eb46fe801278ce42e7ffb89bc1b8c70e20
sha512: fe4b863179ec55fb675e46e9f66270dad4ac5373b3642904f2ab0766b5f74c63bc55ad5c4a1bd035d9b334f39fb5bb2fd65408ebeb996ced64df6bf96d9d78ec
ssdeep: 6144:TOzDInVtJQG8/rCJ4wHEiLUJ4UlpOlEfX:Tacty2JmlOE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T194A4D11377F8D801E2A52670C57B4BE80E25BC56BAB1CD1F1665788E2CB0BE0D97235B
sha3_384: 8fdf76f3df7535d873efc0c2889a0f2b35ba17cef64dde03ee325f76f7bf524e1ad15ff6415b6ac9b55150b8812b1eb1
ep_bytes: 7400e9fb510400000000000000000000
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Virus.Win32.HLLP.DeTroie also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanTrojan.GenericKD.72245479
FireEyeGeneric.mg.eb37bf7337035b04
CAT-QuickHealW32.Detroi.A
SkyhighBehavesLike.Win32.Generic.gt
McAfeeW32/Cheval.b.dr
Cylanceunsafe
VIPRETrojan.GenericKD.72245479
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWVirus ( 0040f5271 )
K7AntiVirusVirus ( 0040f5271 )
BaiduWin32.Worm.DeTroie.a
VirITWin32.DeTroie.A
SymantecW32.HLLP.DeTroie
Elasticmalicious (high confidence)
ESET-NOD32Win32/HLLP.DeTroie.E
APEXMalicious
TrendMicro-HouseCallPE_HLLPDeTroie
AvastWin32:Malware-gen
ClamAVWin.Virus.Detroie-9634218-0
KasperskyVirus.Win32.HLLP.DeTroie
BitDefenderTrojan.GenericKD.72245479
NANO-AntivirusVirus.Win32.HLLP.ggzo
EmsisoftTrojan.GenericKD.72245479 (B)
F-SecureMalware.W32/Detroi.A
DrWebWin32.HLLP.Cheval
ZillyaVirus.DeTroie.Win32.4
TrendMicroPE_HLLPDeTroie
Trapminemalicious.high.ml.score
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
MAXmalware (ai score=81)
JiangminWin32/HLLP.DeTroie
GoogleDetected
AviraW32/Detroi.A
VaristW32/Detroi.YSRW-2447
Antiy-AVLVirus/Win32.DeTroie
MicrosoftVirus:Win32/Detroie
XcitiumWin32.HLLP.DeTroie.E@2hm8
ArcabitTrojan.Generic.D44E60E7
ZoneAlarmVirus.Win32.HLLP.DeTroie
GDataTrojan.GenericKD.72245479
CynetMalicious (score: 100)
AhnLab-V3Virus/Win32.HLLP.C1406176
VBA32Win32.HLLP.DeTroie
ALYacTrojan.GenericKD.72245479
MalwarebytesGeneric.Malware.AI.DDS
PandaW95/HLLP.Detroie.D
ZonerProbably Heur.ExeHeaderP
RisingWorm.Cheval!1.A14A (CLASSIC)
IkarusVirus.Win32.HLLP.DeTroie
FortinetW32/Detroi.A
BitDefenderThetaGen:NN.ZelphiF.36802.DKhlaSsWuUme
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
alibabacloudTrojan.Win.UnkAgent

How to remove Virus.Win32.HLLP.DeTroie?

Virus.Win32.HLLP.DeTroie removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment