Trojan

About “Trojan.Generic.11275148” infection

Malware Removal

The Trojan.Generic.11275148 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.11275148 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Russian
  • Authenticode signature is invalid

How to determine Trojan.Generic.11275148?


File Info:

name: BEA29C26C5C2F80EECC5.mlw
path: /opt/CAPEv2/storage/binaries/6adb666a1c4d317e99037320de17eebe4ed159cab47e783494411ddaed1bef9f
crc32: 2A7E43C5
md5: bea29c26c5c2f80eecc51feaebf38118
sha1: ad2e1dac09faed2f47e874ff2dfbb17b3f65c474
sha256: 6adb666a1c4d317e99037320de17eebe4ed159cab47e783494411ddaed1bef9f
sha512: e9f4da48a419855e778ea593e64c518ee9d5d0ff1a5d2c7843e40bddaa0ba4ea83da293d81197c36f77f6c4dc5d5de9c7fe0d0e97b13c09b4a0140ca4d2ae001
ssdeep: 98304:KV4YSPsqtVpZcPhqFAH9SYGYLkqLrWXexh3nwJsv6tWKFdu9CFg42bJ72:b9SpqFAHVGiWXexJwJsv6tWKFdu9Cay
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T130868E80EFCBC0F2DE961271106B932E5535AB1647349ADBD65C3E179E323D27C3A24A
sha3_384: 0bb1cac220e93ac91d66544daf0aa1148e856e927eae17457c5e9a6a06d64c10af97b5425c23b4281fc4da99919bc1cd
ep_bytes: e83ba60000e989feffffb84f1e9200a3
timestamp: 2011-03-03 11:26:57

Version Info:

0: [No Data]

Trojan.Generic.11275148 also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.Generic.11275148
McAfeeArtemis!BEA29C26C5C2
CylanceUnsafe
ZillyaTrojan.Delf.Win32.72880
AlibabaTrojanPSW:Win32/Shlyaper.59cd2b08
K7GWPassword-Stealer ( 0055e3dc1 )
K7AntiVirusPassword-Stealer ( 0055e3dc1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/PSW.Delf.OFT
BitDefenderTrojan.Generic.11275148
NANO-AntivirusTrojan.Win32.Delf.fcdvnr
AvastWin32:Malware-gen
Ad-AwareTrojan.Generic.11275148
EmsisoftTrojan.Generic.11275148 (B)
ComodoMalware@#1jubhbwthv5f3
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis
FireEyeTrojan.Generic.11275148
IkarusHackTool.Win32.Shlyaper
GDataTrojan.Generic.11275148
WebrootW32.Trojan.Gen
AviraTR/Rogue.8989669.1
Antiy-AVLTrojan/Generic.ASMalwS.2BC76DD
ArcabitTrojan.Generic.DAC0B8C
MicrosoftTrojan:Win32/Occamy.C6A
ALYacTrojan.Generic.11275148
MAXmalware (ai score=99)
YandexTrojan.PWS.Delf!WmBc9EZPbpE
FortinetW32/Delf.OFT!tr.pws
AVGWin32:Malware-gen

How to remove Trojan.Generic.11275148?

Trojan.Generic.11275148 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment