Categories: Trojan

Trojan.Generic.12840252 removal guide

The Trojan.Generic.12840252 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.12840252 virus can do?

At least one IP Address, Domain, or File Name was found in a crypto call
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Sniffs keystrokes
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Generic.12840252?


File Info:
crc32: 4485AFDAmd5: 154b7d7f7f5984f2af96b121e849500cname: Zombie.Army.Trilogy.All.Versions.tr5-XiaoXing.exesha1: afbb414b081683b4a45e295620be62e2dee9cec0sha256: 1a4dbf10416cfecda6a60310bd6d4fce378e38e12b50b19e56c4f143f7e0fa54sha512: 6669dc7bc9518c491246d32e9321b9079de144fcbbbb7393dfb09f482ad04db3ea4ce9e33a26e32649943afc4f46606bb07ca8b3dc60ddcdea08b1c2868d67eassdeep: 12288:NMWar5Lh9i42A5Vn2+P2pZBzmsSwrnpimQPa:NMZU42anfP2pZBasP4mWatype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: @x5c0fx5e78x59d0(Sachiko) x7248x6743x6240x6709FileVersion: 1.0.0.0CompanyName: @x5c0fx5e78x59d0(Sachiko)Comments: x5c0fx5e78x59d0x7684x5faex535a http://weibo.com/ggggggProductName: x50f5x5c38x90e8x961fx4e09x90e8x66f2 x4feex6539x5668ProductVersion: 1.0.0.0FileDescription: Zombie Army Trilogy TrainerTranslation: 0x0804 0x04b0

Trojan.Generic.12840252 also known as:

MicroWorld-eScan	Trojan.Generic.12840252
FireEye	Generic.mg.154b7d7f7f5984f2
CAT-QuickHeal	Trojan.IGENERIC
McAfee	GenericRXEU-WF!154B7D7F7F59
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 005246d51 )
BitDefender	Trojan.Generic.12840252
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.f7f598
BitDefenderTheta	Gen:NN.ZexaF.34090.0q0@aS0g9@ib
F-Prot	W32/Agent.EW.gen!Eldorado
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Zusy-6840460-0
GData	Win32.Application.FlyStudio.F
Kaspersky	Trojan-Spy.Win32.KeyLogger.bnyu
NANO-Antivirus	Trojan.Win32.RiskGen.dphgir
AegisLab	Trojan.Win32.Generic.lfbe
Rising	Trojan.Win32.Generic.184FC274 (C64:YzY0OtMpfbmj71af)
Ad-Aware	Trojan.Generic.12840252
Comodo	Worm.Win32.Dropper.RA@1qraug
F-Secure	Trojan:W32/DelfInject.R
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.Generic.12840252 (B)
Ikarus	Trojan.SuspectCRC
Cyren	W32/Agent.EW.gen!Eldorado
Webroot	Pua.Gen
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.DC3ED3C
ZoneAlarm	Trojan-Spy.Win32.KeyLogger.bnyu
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
VBA32	BScope.Trojan.Orsam
ALYac	Trojan.Generic.12840252
MAX	malware (ai score=100)
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/FlyStudio.HackTool.A potentially unwanted
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.7164915.susgen