What is “Trojan-Downloader.Win32.Generic”?

The Trojan-Downloader.Win32.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan-Downloader.Win32.Generic virus can do?

• Executable code extraction
• Creates RWX memory
• A process attempted to delay the analysis task.
• Attempts to connect to a dead IP:Port (8 unique times)
• At least one IP Address, Domain, or File Name was found in a crypto call
• Unconventionial language used in binary resources: Russian
• The binary likely contains encrypted or compressed data.
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Steals private information from local Internet browsers
• Detects VirtualBox through the presence of a registry key
• Detects VMware through the presence of a registry key
• Attempts to modify proxy settings
• Attempts to create or modify system certificates
• Collects information to fingerprint the system
• Anomalous binary characteristics

How to determine Trojan-Downloader.Win32.Generic?

File Info:
crc32: 5925E1C5
md5: 36ed6ebbde3ca54e4a71950518b5572e
name: eupanda.exe
sha1: 09cd4ff01620634229d346b94eadcd4fc5510426
sha256: fcc5a956c6a26326d2ef51aa71f9996dc7e5003f332f24619464c5187b3008c2
sha512: 4dbb819ef9cc5dbd457ccb24842b50a6416f792c20439580dc1d2d8b69cac7ae53d1f0442db2f6b487e95b1a4bd8aef8ae54e2c87649d49d276af5d1ec9a10a6
ssdeep: 49152:deR5PcN/45z7p9PgYGG8BQBCqnNyw/jKx:devcO5F8eC+NN/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: Modified by an unpaid evaluation copy of Resource Tuner 2. http://www.heaventools.com
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: 
Translation: 0x0000 0x04e3

Trojan-Downloader.Win32.Generic also known as:

How to remove Trojan-Downloader.Win32.Generic?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.