Trojan

How to remove “Trojan.Generic.11680900”?

Malware Removal

The Trojan.Generic.11680900 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.11680900 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Generic.11680900?


File Info:

name: FC8F0355629B6A73F371.mlw
path: /opt/CAPEv2/storage/binaries/7c5f0659568322491c54115237425cf44b26e64934a4f1eb16cfbbefec59ce4c
crc32: C2EE4D45
md5: fc8f0355629b6a73f3719d25f34069ec
sha1: 463d182eed904b1769829f9c036a23146a986abb
sha256: 7c5f0659568322491c54115237425cf44b26e64934a4f1eb16cfbbefec59ce4c
sha512: e9898eefafe31c84ec2cf21a2608364c485df7674441af50e92b3fb7e9299bd86b3d4e00d96e9bc34b04439a0f886bbfd50ec20499443bf1c353af69c8028538
ssdeep: 12288:IqtYNcNR4BsagrIib+sn8M8naKrCCaoH1nA7D4S8:INlby+kIaWDnwL8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18AC4232BD954ECA4E97A093A161FDC844218BD013B7C566D1C89C5F4A9BB7C3F3CAA43
sha3_384: 36065aa5bff8207522cf2cb5f8e898c81103e45a1a19640c25a87b92800ac22b788cd42a3520392bccdccbd8109fbbc6
ep_bytes: 60be000049008dbe0010f7ff5783cdff
timestamp: 2009-05-05 17:19:14

Version Info:

CompanyName: DAS
FileDescription: DAS smart cars calculator
FileVersion: 1.0.0.1
InternalName: SmartCalc.exe
LegalCopyright: (c) All rights reserved.
OriginalFilename: SmartCalc.exe
ProductName: DAS SMART CARS CALCULATOR
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Trojan.Generic.11680900 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.11680900
FireEyeTrojan.Generic.11680900
ALYacTrojan.Generic.11680900
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.56102
SangforTrojan.Win32.Agent.atgen
K7AntiVirusRiskware ( f15000051 )
AlibabaTrojan:Win32/Buzus.d8f318b7
K7GWRiskware ( f15000051 )
SymantecML.Attribute.HighConfidence
APEXMalicious
BitDefenderTrojan.Generic.11680900
TencentMalware.Win32.Gencirc.114d4a48
EmsisoftTrojan.Generic.11680900 (B)
ComodoMalware@#m1g03aiwi9ti
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PL821
McAfee-GW-EditionGenericRXBX-UV!3F29ED00A246
SophosMal/Generic-R
IkarusTrojan.Win32.Buzus
WebrootW32.Trojan.Gen
Antiy-AVLTrojan/Generic.ASMalwS.24ECC9B
MicrosoftPWS:Win32/Zbot!ml
ViRobotTrojan.Win32.Z.Agent.579584.FF
GDataTrojan.Generic.11680900
CynetMalicious (score: 100)
McAfeeGenericRXAA-FA!FC8F0355629B
MAXmalware (ai score=89)
VBA32BScope.Trojan.Click
TrendMicro-HouseCallTROJ_GEN.R002C0PL821
RisingTrojan.Kryptik!1.D9B6 (CLOUD)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
Cybereasonmalicious.5629b6
PandaTrj/CI.A

How to remove Trojan.Generic.11680900?

Trojan.Generic.11680900 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment