Trojan

Trojan.Generic.10028584 removal guide

Malware Removal

The Trojan.Generic.10028584 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.10028584 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Norwegian (Bokmal)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Generic.10028584?


File Info:

name: E99DE4099CCF90AD645E.mlw
path: /opt/CAPEv2/storage/binaries/fa20ae264b30c8af782cab8eeef45f7997dcd98a41f5620eafe81836b0861c82
crc32: 7712DB7D
md5: e99de4099ccf90ad645e653283a6040d
sha1: 45da926e3a754b43c8126ac5519de563d1589392
sha256: fa20ae264b30c8af782cab8eeef45f7997dcd98a41f5620eafe81836b0861c82
sha512: 0a02b76da14f1f9feaf5dcb0d640c13aa921be45ff6ae0367afa18b9c81929193d12e95064534f8b0e31750a6ae217db265572701f60f9add181557350b57a5f
ssdeep: 1536:P/qamYmqxh8tA7IEHwatGfYyp1XCBXgutFSHWpWZyiYQXCZdlR7dchcoVLO:P/2YmfqwatyYy1XCpg+dp4yiRXC9R7qw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13293F18739085C27C5E327320366CBEA57497471866243CB6D98134F7FEFAAB7D0152A
sha3_384: 7df1e9e9f7236e92fbc96b3144ac7e1ffcfd99d77fd610828eed7d96fb9de6fb68496a19d51fb879792efa2d269adc7e
ep_bytes: 60be001042008dbe0000feff5783cdff
timestamp: 2002-07-04 15:30:51

Version Info:

0: [No Data]

Trojan.Generic.10028584 also known as:

LionicTrojan.Multi.Generic.4!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.Generic.10028584
FireEyeTrojan.Generic.10028584
ALYacTrojan.Generic.10028584
CylanceUnsafe
K7AntiVirusUnwanted-Program ( 004d38111 )
K7GWUnwanted-Program ( 004d38111 )
BitDefenderThetaGen:NN.ZexaF.34606.fmGfaGB48oiO
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Keygen.CY potentially unsafe
ClamAVWin.Trojan.10028584-1
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.Generic.10028584
AvastWin32:Malware-gen
Ad-AwareTrojan.Generic.10028584
ComodoMalware@#2s4whpjsiz9x6
ZillyaTrojan.Keygen.Win32.5628
McAfee-GW-EditionBehavesLike.Win32.Virus.nc
EmsisoftTrojan.Generic.10028584 (B)
Ikaruspossible-Threat.Keygen.Orion
WebrootW32.Malware.Gen
MAXmalware (ai score=100)
Antiy-AVLTrojan/Generic.ASMalwS.22A9380
MicrosoftTrojan:Win32/Occamy.CFA
GDataTrojan.Generic.10028584
McAfeeArtemis!E99DE4099CCF
VBA32BScope.Trojan.Occamy
APEXMalicious
RisingTrojan.Occamy!8.F1CD (CLOUD)
YandexPUP.Agent!RWY+UIuE1rE
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/KeyGen
AVGWin32:Malware-gen
Cybereasonmalicious.99ccf9

How to remove Trojan.Generic.10028584?

Trojan.Generic.10028584 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment