Trojan

Trojan.Generic.11692952 (file analysis)

Malware Removal

The Trojan.Generic.11692952 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.11692952 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to connect to a dead IP:Port (12 unique times)
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

cheat-master.ru
ocsp.godaddy.com
www.googletagmanager.com
crl.godaddy.com
www.bing.com
ocsp.pki.goog
www.google-analytics.com
counter.yadro.ru
ocsp.comodoca.com
ocsp.usertrust.com

How to determine Trojan.Generic.11692952?


File Info:

crc32: 60AD652A
md5: 70db36c32dd7b2084d0290646d9ebd96
name: Cheat-Master.ru.exe
sha1: f60f984ec6d588cf9183f5db8075fcd92671e31f
sha256: 330a948e2b0018cfad48f829791b9d6b496a708960b91cccf7328f2eef354213
sha512: ae5a742f2189781ee63ba49a748dd952405eaf4896827b1975297f42674affac1804c3c32678f335a1ef0fbe682af7f2178bb78ee1b24a4e1e1d5846540bcaa2
ssdeep: 96:jmeKz3/drDHMZ7h+YeZBxJJSI+UqOX+0ki9+3jtyLzJeCa8KC7tCH4VN:jm3+Z7h+YeVJJRhqOXKqGj8LzupIN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Generic.11692952 also known as:

MicroWorld-eScanTrojan.Generic.11692952
FireEyeTrojan.Generic.11692952
CAT-QuickHealTrojan.Agent
ALYacTrojan.Generic.11692952
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
BitDefenderTrojan.Generic.11692952
Cybereasonmalicious.32dd7b
SymantecTrojan.Gen.2
GDataTrojan.Generic.11692952
ViRobotTrojan.Win32.Z.Agent.10240.AXZ
AegisLabTrojan.Win32.Inject.to0a
Ad-AwareTrojan.Generic.11692952
DrWebAdware.Siggen.31183
McAfee-GW-EditionArtemis
EmsisoftTrojan.Generic.11692952 (B)
WebrootW32.Trojan.Gen
MAXmalware (ai score=81)
ArcabitTrojan.Generic.DB26B98
McAfeeArtemis!70DB36C32DD7
TrendMicro-HouseCallTROJ_GEN.R002H09L519
YandexPUA.Agent!
eGambitGeneric.Trojan

How to remove Trojan.Generic.11692952?

Trojan.Generic.11692952 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment