About "Trojan.Generic.11199524" infection

The Trojan.Generic.11199524 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.11199524 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial binary language: Polish
Unconventionial language used in binary resources: Polish
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

dl.dropboxusercontent.com

ocsp.digicert.com

crl3.digicert.com

crl4.digicert.com

How to determine Trojan.Generic.11199524?


File Info:
crc32: 38666915
md5: 8447f5cc6d2b72edf4333747eea39878
name: 8447F5CC6D2B72EDF4333747EEA39878.mlw
sha1: eff569894ceabc94d81c9ae00592aa10f5ff167f
sha256: 1dca3956339d27ac5c667c8a79a5c9f9d874e7181bb2266b61eb9953684c6e42
sha512: 5411560966f360b255b3b4727d4d6842908018b00e38fde4f888216a96aaeac82d96f06e0f12aa05a5e07f25a7590a67083522e85a2c5c0dc16bfe99e004b398
ssdeep: 24576:l8sAr9AiPPhCPe/yyQf/sYD6QKbiY/SDPNMnBFRl1uaJ:l8sAr9fPpCPtyQ84KbJ/SbmB7l1ua
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: ASTRAL_TEAM_PL
ProductVersion: 3.3.11.1
FileVersion: 2.0.2.5
Comments: Liczyk osx142on, strzax142u, PETa, rakiet, prx119dkox15bci itd w grze DarkOrbit
FileDescription: Liczyk osx142on, strzax142u, PETa, rakiet, prx119dkox15bci itd w grze DarkOrbit
Translation: 0x0415 0x04b0

Trojan.Generic.11199524 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 004b8bad1 )
Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 100)
ALYac	Trojan.Generic.11199524
Cylance	Unsafe
K7GW	Trojan ( 004b8bad1 )
Cybereason	malicious.c6d2b7
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Trojan.Generic.11199524
MicroWorld-eScan	Trojan.Generic.11199524
Tencent	Win32.Trojan.Agent.Dypz
Ad-Aware	Trojan.Generic.11199524
Sophos	Generic PUA OP (PUA)
Comodo	Malware@#3dgdkhee1u4x
F-Secure	Trojan.TR/Agent.1220608.53
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.tc
FireEye	Trojan.Generic.11199524
Emsisoft	Trojan.Generic.11199524 (B)
Avira	TR/Agent.1220608.53
Antiy-AVL	GrayWare/Autoit.Execute.a
Kingsoft	Win32.Troj.Generic.v.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.DAAE424
GData	Trojan.Generic.11199524
McAfee	Artemis!8447F5CC6D2B
MAX	malware (ai score=82)
Malwarebytes	Malware.Heuristic.1003
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:Malware-gen

How to remove Trojan.Generic.11199524?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan.Generic.11199524” infection