Trojan.Extgen removal instruction

The Trojan.Extgen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Extgen virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image
Authenticode signature is invalid
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine Trojan.Extgen?


File Info:
name: 75F599327C63848FDDDC.mlw
path: /opt/CAPEv2/storage/binaries/3e0e69726160fc8e883f0b8006d8211eae00b14f5c6f9088a12562794d153bd2
crc32: C8DB1594
md5: 75f599327c63848fdddc2aa48709f3bb
sha1: 7a248bf63d14788bf19ef6509cc534ba759cca86
sha256: 3e0e69726160fc8e883f0b8006d8211eae00b14f5c6f9088a12562794d153bd2
sha512: 2764e27df1f635087a6c2dd92c355b927ba6e517eaab211e27d10cad4a4243e2c149b3ee5a3e19eeb6fe5f38530208d02ff3b01ca55de7a0386a3b660e444ce1
ssdeep: 196608:QlebGcN/2zfjsegfhjXJ9S6sQVyIVACj6m5b9bvMKjWW+B:QlQGpzfjSZZI63V/VGm5biyP+B
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A4762364A6D18E79DF171AFDA04E88EBA95FCDA313C8003327F195D2CA642D1941FE1E
sha3_384: ffa67e5c02df5d60b71dd69c1ca0c7a5e6a04704ec58127fa571399d769b29289668c727150be49c96e323dcc48d638c
ep_bytes: e810920000e940feffff8b442404a3e0
timestamp: 2022-09-13 06:22:52

Version Info:
FileVersion: 5.4.7.0    
ProductVersion: 5.4.7.0    
OriginalFilename:                                         
InternalName:                                         
FileDescription: SimpleHelp Remote Support Client                                                                    
CompanyName: SimpleHelp Ltd                          
LegalCopyright: Copyright (c) 2023                      
ProductName: Remote Support                          
Translation: 0x0000 0x04b0

Trojan.Extgen also known as:

Bkav	W32.Common.A7373218
Lionic	Trojan.Win32.Extgen.4!c
DrWeb	Trojan.Siggen19.3578
CAT-QuickHeal	Trojan.Extgen
McAfee	Artemis!75F599327C63
Cylance	unsafe
Zillya	Trojan.Disfa.Win32.85179
Alibaba	Trojan:Win32/Extgen.204f0b8a
Elastic	malicious (high confidence)
Kaspersky	HEUR:Trojan.Win32.Extgen.gen
NANO-Antivirus	Trojan.Win32.Extgen.jvuuat
Avast	Win32:Malware-gen
F-Secure	Trojan.TR/Redcap.ockhx
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Trojan.Win32
Jiangmin	Trojan.Extgen.c
Avira	TR/Redcap.ockhx
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan.Win32.Extgen.gen
GData	Win32.Trojan.PSE.12OPR91
Google	Detected
VBA32	Trojan.Agent
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H07IK23
Rising	Trojan.Generic@AI.100 (RDMK:e2k8a9M8gulq2EAe4uhabQ)
MaxSecure	Trojan.Malware.206560034.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan.Extgen?

Trojan.Extgen removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X