Trojan

How to remove “Trojan.BTSoft.Gen”?

Malware Removal

The Trojan.BTSoft.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.BTSoft.Gen virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
hiiiiiiiii.homler.net

How to determine Trojan.BTSoft.Gen?


File Info:

crc32: B9E6E37C
md5: dd617113c1cb4640417f35cc4091b859
name: DD617113C1CB4640417F35CC4091B859.mlw
sha1: 18d635b3b8528da540821423f9e1515825262535
sha256: 2582042072b6bf41dc1312e9cef348c4d16b0cff03d9f93aabd5db6889de324e
sha512: 9d25d36ea323f855776322bb0c3b397b66a3c7f6abd8bfba1e3f9ede0327de2d0e0dfd3f66bda292deeec0d8311f73a4c963b38484ea9cb585ea88fd6917271c
ssdeep: 1536:rAvNgoVfPdHdM3dZhWj/u/UYXDgvrROC:rs22dAbheOUYXDooC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.BTSoft.Gen also known as:

BkavW32.AIDetect.malware1
LionicWorm.Win32.Kolab.p!c
Elasticmalicious (high confidence)
DrWebBackDoor.IRC.Bot.166
ClamAVWin.Trojan.Kolab-2926
ALYacGen:Variant.Barys.5641
MalwarebytesTrojan.BTSoft.Gen
ZillyaTrojan.SdBot.Win32.1113
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Starter.ali2000005
Cybereasonmalicious.3c1cb4
CyrenW32/IrcBot.P.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32IRC/SdBot
APEXMalicious
AvastWin32:Kolab-ZX [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Barys.5641
NANO-AntivirusTrojan.Win32.Kolab.tibps
ViRobotWorm.Win32.A.Net-Kolab.50688
MicroWorld-eScanGen:Variant.Barys.5641
TencentWin32.Trojan.Generic.Wtnd
Ad-AwareGen:Variant.Barys.5641
SophosML/PE-A + Troj/ZXC-W
ComodoTrojWare.Win32.Kryptik.AHEA@4pn42q
BitDefenderThetaGen:NN.ZexaF.34266.du0@auh7M9m
VIPRETrojan.Win32.FakeAV.oq (v)
McAfee-GW-EditionPWS-Zbot.gen.aqv
FireEyeGeneric.mg.dd617113c1cb4640
EmsisoftGen:Variant.Barys.5641 (B)
JiangminWorm/Kolab.mam
WebrootW32.Infostealer.Citadel.Gen
AviraTR/Crypt.XPACK.Gen7
eGambitUnsafe.AI_Score_71%
Antiy-AVLTrojan/Generic.ASMalwS.191DFC
KingsoftWorm.Kolab.(kcloud)
MicrosoftWorm:Win32/Pushbot.gen
ArcabitTrojan.Barys.D1609
SUPERAntiSpywareTrojan.Agent/Gen-FraudScan[Prod]
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Barys.5641
AhnLab-V3Spyware/Win32.Zbot.R28862
Acronissuspicious
McAfeePWS-Zbot.gen.aqv
MAXmalware (ai score=100)
VBA32Trojan.TDSS.01414
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.100 (RDML:1dLzKoO2wmvwVvILS/oSzw)
YandexTrojan.GenAsa!0dIv68iWucc
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.4158279.susgen
FortinetW32/Zbot.AQV!tr
AVGWin32:Kolab-ZX [Trj]
Paloaltogeneric.ml

How to remove Trojan.BTSoft.Gen?

Trojan.BTSoft.Gen removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment