Trojan

Win64/TrojanDownloader.Small.H removal tips

Malware Removal

The Win64/TrojanDownloader.Small.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win64/TrojanDownloader.Small.H virus can do?

  • Uses Windows utilities for basic functionality
  • Authenticode signature is invalid
  • Attempts to modify proxy settings

How to determine Win64/TrojanDownloader.Small.H?


File Info:

name: CD2B5EE639A34C6C562C.mlw
path: /opt/CAPEv2/storage/binaries/d654730c967d77a624faccaeec0b5cf696f6d7c135f41381764e0503ecbd505b
crc32: D98C2CAB
md5: cd2b5ee639a34c6c562ca83591d3f5fd
sha1: b6cfbd323198a5b2f40149ce89b214b338d48d82
sha256: d654730c967d77a624faccaeec0b5cf696f6d7c135f41381764e0503ecbd505b
sha512: 1a106460a7b2fe1790e3731d850236029109407f01595180648cebafee6dc42ec9dd96af0547a17de3f75966238527bcae51687c2b6cc9257af65522ecd68730
ssdeep: 96:xtHtXPIS9MZCBjPlfrzCdOjJ99oTrC2iHfor:btXo8PpCdOd9912iHfor
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T124C1EB37828699B8C22F44FB9F9ED4AE2525F4D083C23026C7605F797F82938365905D
sha3_384: 20f1197a841250de073348653b4ac0478f01e3344722dd3333065cad73ac565a7607a80a24e2411b0492e76ad84b529b
ep_bytes: 554889e54881ec50000000b800000000
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Win64/TrojanDownloader.Small.H also known as:

BkavW64.AIDetectMalware
LionicRiskware.Win32.Tiny.1!c
MicroWorld-eScanTrojan.Agent.GGOF
FireEyeTrojan.Agent.GGOF
SkyhighBehavesLike.Win64.Malware.zt
ALYacTrojan.Agent.GGOF
Cylanceunsafe
ZillyaDownloader.Agent.Win32.526183
SangforDownloader.Win64.Tiny.V7an
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:Win64/TrollAV.b6310b43
K7GWTrojan ( 005ab3501 )
K7AntiVirusTrojan ( 005ab3501 )
ArcabitTrojan.Agent.GGOF
SymantecDownloader
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win64/TrojanDownloader.Small.H
CynetMalicious (score: 100)
ClamAVWin.Malware.Ggof-10009966-0
Kasperskynot-a-virus:HEUR:RiskTool.Win64.TrollAV.gen
BitDefenderTrojan.Agent.GGOF
AvastWin64:DropperX-gen [Drp]
TencentTrojan-DL.Win32.Small.kq
TACHYONTrojan/W64.Agent.5632.CQ
SophosTroj/Dloadr-EGX
F-SecureTrojan.TR/Tiny.betdk
DrWebTrojan.DownLoader46.21508
VIPRETrojan.Agent.GGOF
TrendMicroTROJ_GEN.R002C0DIL23
EmsisoftTrojan.Agent.GGOF (B)
IkarusTrojan-Downloader.Small
JiangminTrojanDownloader.Agent.gdwy
VaristW64/Tiny.M.gen!Eldorado
AviraTR/Tiny.betdk
Antiy-AVLTrojan[Downloader]/Win64.Small
KingsoftWin32.Troj.Unknown.a
MicrosoftTrojan:Win32/Tiny.EB!MTB
ZoneAlarmnot-a-virus:HEUR:RiskTool.Win64.TrollAV.gen
GDataWin64.Trojan-Downloader.Tiny.H
GoogleDetected
AhnLab-V3Downloader/Win.Tiny.R604304
McAfeeArtemis!CD2B5EE639A3
MAXmalware (ai score=80)
VBA32Downloader.Win64.Tiny
MalwarebytesTrojan.Downloader
TrendMicro-HouseCallTROJ_GEN.R002C0DIL23
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW64/Dropper.X!tr
AVGWin64:DropperX-gen [Drp]
DeepInstinctMALICIOUS

How to remove Win64/TrojanDownloader.Small.H?

Win64/TrojanDownloader.Small.H removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment