Trojan

Trojan.Generic.1209104 removal

Malware Removal

The Trojan.Generic.1209104 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.1209104 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Installs itself for autorun at Windows startup

How to determine Trojan.Generic.1209104?


File Info:

name: B42DBEED42ECB10CD5D6.mlw
path: /opt/CAPEv2/storage/binaries/3016e50b9e61a71e9b4cb6037ced209fa4109398fe41789d00e4e4f3a85386c2
crc32: 3E744F4B
md5: b42dbeed42ecb10cd5d6a050017b61ae
sha1: 47c5c8af7633002c25548f4e136a419ba94f8c84
sha256: 3016e50b9e61a71e9b4cb6037ced209fa4109398fe41789d00e4e4f3a85386c2
sha512: 5330c4b5e65e3bd74e117dd04452ece26b1b300e0a6c188c070ceccaf4db8115c860e50d1ee2bd7584a717ac74b9dbe3bccb8244c5017e3189d9aa8f03301f71
ssdeep: 3072:Zfn7SNVai4pjTH6RA45pAkByfBdh0lbM4d9:Wai4pjTH6RA4w2lgK9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13CC3E723BE51952FE1E3C5F469A480A778266E3117C2AC5373827F582972683B8F171F
sha3_384: 9a849161d07aed16a4b5b2af45892dd594b9fed26bd652f75998bdd2f7268f13247937c2a59c5bea52b7669cffa07039
ep_bytes: 68d42d4000e8eeffffff000000000000
timestamp: 2004-01-23 23:39:42

Version Info:

0: [No Data]

Trojan.Generic.1209104 also known as:

BkavW32.AIDetectNet.01
DrWebTrojan.KeyLogger.2341
McAfeeArtemis!B42DBEED42EC
CylanceUnsafe
SangforVISUAL BASIC4
K7AntiVirusTrojan ( 003b1b581 )
BitDefenderTrojan.Generic.1209104
K7GWTrojan ( 003b1b581 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.B20117B31F
CyrenW32/Trojan.HRYL-2656
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.KeyLogger.NCQ
TrendMicro-HouseCallTROJ_GEN.R03BC0PDU22
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Small.gfww
MicroWorld-eScanTrojan.Generic.1209104
RisingSpyware.Keylogger!1.6813 (CLASSIC)
Ad-AwareTrojan.Generic.1209104
ComodoTrojWare.Win32.TrojanSpy.KeyLogger.~BK@2nmtz
TrendMicroTROJ_GEN.R03BC0PDU22
FireEyeGeneric.mg.b42dbeed42ecb10c
EmsisoftTrojan.Generic.1209104 (B)
IkarusTrojan-Spy.Win32.KeyLogger
GDataTrojan.Generic.1209104
AviraTR/VB.Downloader.Gen
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
AhnLab-V3Trojan/Win32.RL_Skeeyah.R266655
Acronissuspicious
VBA32Trojan.VBRA.012390
ALYacTrojan.Generic.1209104
MAXmalware (ai score=83)
PandaTrj/CI.A
APEXMalicious
YandexTrojan.GenAsa!/rdXM+qtJgs
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.W32.Packer.Upack0.3.9
FortinetW32/PWS.Y!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.d42ecb
AvastWin32:Trojan-gen

How to remove Trojan.Generic.1209104?

Trojan.Generic.1209104 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment