Win32/Packed.EXEShive.E suspicious removal

The Win32/Packed.EXEShive.E suspicious is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Packed.EXEShive.E suspicious virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Win32/Packed.EXEShive.E suspicious?


File Info:
crc32: D874D95A
md5: b13d41d251407babb5f61140b947ef29
name: B13D41D251407BABB5F61140B947EF29.mlw
sha1: 04b6bb4b60febfc2ee0966f4d43bdde36113bb84
sha256: 268ff914b24e0d548931a7b37b3a6c48c2f4f7a1a842eeb021363608c8761edc
sha512: 13ab9504a79089e6a7a91456286b013f8547e0f1243f65ffc14e836d29041c58ff9deae38590e87523cd13e34a733aa549131cf4ad0accee38f17f0ad31aec04
ssdeep: 3072:5Smn7/PDOpyJdtV06VgiTApUMkOC5pxFp8HgoNqnwqMfNdaHx7hzK:5vnzqEJdtV7VrLpxSqwqMfu7tK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright ? 2011 Tencent. All Rights Reserved
FileVersion: 1, 71, 104, 0
CompanyName: Tencent
ProductName: bugreport
ProductVersion: 1, 71, 104, 0
FileDescription: bugreport
Translation: 0x0804 0x04b0

Win32/Packed.EXEShive.E suspicious also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 003a82fe1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader6.19102
ALYac	Trojan.GenericKD.40151394
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.ky
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Packed:Win32/EXEShive.8b907a41
K7GW	Trojan ( 003a82fe1 )
Cybereason	malicious.251407
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.EXEShive.E suspicious
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.40151394
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
ViRobot	Trojan.Win32.Z.Zaccess.314117
MicroWorld-eScan	Trojan.GenericKD.40151394
Tencent	Win32.Backdoor.Gh0st.Mjue
Ad-Aware	Trojan.GenericKD.40151394
Sophos	ML/PE-A + Mal/ZAccess-BL
Comodo	Malware@#11eyp4ewop2oh
BitDefenderTheta	Gen:NN.ZexaF.34266.tO0@aOl!z0mj
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PJV21
McAfee-GW-Edition	BehavesLike.Win32.Infected.fh
FireEye	Generic.mg.b13d41d251407bab
Emsisoft	Trojan.GenericKD.40151394 (B)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/Generic.ASMalwS.24B1891
Microsoft	Trojan:Win32/Trickbot!ml
GData	Trojan.GenericKD.40151394
Acronis	suspicious
McAfee	Generic.dbq
MAX	malware (ai score=96)
VBA32	TScope.Malware-Cryptor.SB
TrendMicro-HouseCall	TROJ_GEN.R002C0PJV21
Rising	Trojan.Generic@ML.86 (RDML:ZczTmMCmznrciS6tb5s/UQ)
Yandex	Riskware.EXEShive!HhUZ9Tuv+iM
Ikarus	Trojan.Win32.Spy
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Suspic
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Win32/Packed.EXEShive.E suspicious?

Win32/Packed.EXEShive.E suspicious removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X