How to remove “Perl/Exploit.Trapset.A”?

The Perl/Exploit.Trapset.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Perl/Exploit.Trapset.A virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Perl/Exploit.Trapset.A?


File Info:
name: 0CB5BF57599229C6E1F6.mlw
path: /opt/CAPEv2/storage/binaries/bda5d50e274b8b9e9472d950828def54fd9c298dd3205e29c88e3426d48fd37e
crc32: 3F9F81FA
md5: 0cb5bf57599229c6e1f6f7fe6360af95
sha1: 1548618d0d4632a17190696aff767860f387833b
sha256: bda5d50e274b8b9e9472d950828def54fd9c298dd3205e29c88e3426d48fd37e
sha512: efbf60a8ca9e9f503ca39397dd1c4d61d8aa534fc2bd8aae95e6836fea6d8f01b49e8f61242a0bbac0962ffa8592998b8c434f8f831452693b38ea5a6109269a
ssdeep: 12288:zwzy2FaCAl1HXEeuOC6jPyyigmx1QJmZeiVgivt:zCFaCATEeuLC/qyJit
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D0D42321CE70616CDDF242326C77277C1E72BB1A2546974F2A0D5A842F828C9FB9275F
sha3_384: 21814dfb6be54e0e06f30d1cd12fbc9eee0f994ce73f3d9fe0d9f9a27a8b9521c8d44621f7b5bbcd69e8231da6c089fe
ep_bytes: 558bec6aff68d0a1400068ee57400064
timestamp: 2003-04-04 03:24:27

Version Info:
Translation: 0x0409 0x040b
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
ProductName: 
ProductVersion: 1.0.0.0
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
InternalName: ;

Perl/Exploit.Trapset.A also known as:

Lionic	Trojan.Win32.Trapset.3!c
DrWeb	Exploit.Trapset.1
Skyhigh	Exploit-Asport.a
McAfee	Exploit-Asport.a
Cylance	unsafe
Zillya	Exploit.Trapset.Win32.1
Alibaba	Exploit:Perl/Trapset.224f9bf9
Symantec	Trojan.Gen.MBT
ESET-NOD32	Perl/Exploit.Trapset.A
Cynet	Malicious (score: 99)
Kaspersky	Exploit.Perl.Trapset.a
NANO-Antivirus	Exploit.Win32.Trapset.eagueo
Avast	Win32:Trojan-gen
Tencent	Perl.Exploit.Trapset.Qsmw
F-Secure	Dropper.DR/Expl.Perl.Trapset.A
TrendMicro	HackingTools_TrapSet
Webroot	W32.Trojan.Trojan.Gen.X
Varist	W32/Trojan.MJZX-4397
Avira	DR/Expl.Perl.Trapset.A
Kingsoft	Win32.Troj.Unknown.a
Microsoft	Trojan:Win32/DSSDetection
Xcitium	ApplicUnsaf@#3qef025ic77dp
ZoneAlarm	Exploit.Perl.Trapset.a
Google	Detected
VBA32	Exploit.Perl
TACHYON	Trojan/W32.Agent.602174
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Malware
TrendMicro-HouseCall	HackingTools_TrapSet
Rising	Hack.FindLogin (CLASSIC)
Yandex	Exploit.Trapset!gC47oSnC6Cw
Ikarus	Exploit.Perl.Trapset
MaxSecure	Trojan.Malware.1842238.susgen
Fortinet	Perl/Asport.A!exploit
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS

How to remove Perl/Exploit.Trapset.A?

Perl/Exploit.Trapset.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X