Trojan.Generic.12840252 removal guide

The Trojan.Generic.12840252 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.12840252 virus can do?

At least one IP Address, Domain, or File Name was found in a crypto call
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Sniffs keystrokes
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Generic.12840252?


File Info:
crc32: 4485AFDA
md5: 154b7d7f7f5984f2af96b121e849500c
name: Zombie.Army.Trilogy.All.Versions.tr5-XiaoXing.exe
sha1: afbb414b081683b4a45e295620be62e2dee9cec0
sha256: 1a4dbf10416cfecda6a60310bd6d4fce378e38e12b50b19e56c4f143f7e0fa54
sha512: 6669dc7bc9518c491246d32e9321b9079de144fcbbbb7393dfb09f482ad04db3ea4ce9e33a26e32649943afc4f46606bb07ca8b3dc60ddcdea08b1c2868d67ea
ssdeep: 12288:NMWar5Lh9i42A5Vn2+P2pZBzmsSwrnpimQPa:NMZU42anfP2pZBasP4mWa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: @x5c0fx5e78x59d0(Sachiko) x7248x6743x6240x6709
FileVersion: 1.0.0.0
CompanyName: @x5c0fx5e78x59d0(Sachiko)
Comments: x5c0fx5e78x59d0x7684x5faex535a http://weibo.com/gggggg
ProductName: x50f5x5c38x90e8x961fx4e09x90e8x66f2 x4feex6539x5668
ProductVersion: 1.0.0.0
FileDescription: Zombie Army Trilogy Trainer
Translation: 0x0804 0x04b0

Trojan.Generic.12840252 also known as:

MicroWorld-eScan	Trojan.Generic.12840252
FireEye	Generic.mg.154b7d7f7f5984f2
CAT-QuickHeal	Trojan.IGENERIC
McAfee	GenericRXEU-WF!154B7D7F7F59
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 005246d51 )
BitDefender	Trojan.Generic.12840252
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.f7f598
BitDefenderTheta	Gen:NN.ZexaF.34090.0q0@aS0g9@ib
F-Prot	W32/Agent.EW.gen!Eldorado
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Zusy-6840460-0
GData	Win32.Application.FlyStudio.F
Kaspersky	Trojan-Spy.Win32.KeyLogger.bnyu
NANO-Antivirus	Trojan.Win32.RiskGen.dphgir
AegisLab	Trojan.Win32.Generic.lfbe
Rising	Trojan.Win32.Generic.184FC274 (C64:YzY0OtMpfbmj71af)
Ad-Aware	Trojan.Generic.12840252
Comodo	Worm.Win32.Dropper.RA@1qraug
F-Secure	Trojan:W32/DelfInject.R
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.Generic.12840252 (B)
Ikarus	Trojan.SuspectCRC
Cyren	W32/Agent.EW.gen!Eldorado
Webroot	Pua.Gen
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.DC3ED3C
ZoneAlarm	Trojan-Spy.Win32.KeyLogger.bnyu
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
VBA32	BScope.Trojan.Orsam
ALYac	Trojan.Generic.12840252
MAX	malware (ai score=100)
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/FlyStudio.HackTool.A potentially unwanted
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.7164915.susgen

How to remove Trojan.Generic.12840252?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Generic.12840252 removal guide