How to remove “Trojan.Generic.1486970”?

The Trojan.Generic.1486970 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.1486970 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Scheduled file move on reboot detected
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Anomalous file deletion behavior detected (10+)
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Unconventionial language used in binary resources: Turkish
• Authenticode signature is invalid

How to determine Trojan.Generic.1486970?

File Info:
name: D045D16CF5EC3441CCDC.mlw
path: /opt/CAPEv2/storage/binaries/391796c5387391af4f9b1511f5a4e866b13bd21caf1fc8b5d9c5598baa847bfb
crc32: F7F6BA6E
md5: d045d16cf5ec3441ccdcea86d205636c
sha1: aed44b4173410ac8822270923c09239a7ba83c8d
sha256: 391796c5387391af4f9b1511f5a4e866b13bd21caf1fc8b5d9c5598baa847bfb
sha512: 8a645699df41cf9138cfeeda4d64e10f58080b6869f8c3ceb6c64488afb8398b95a50af901054d775487fd66fa8756b88ff3b33b3c0eac161307c9d89ecbd43b
ssdeep: 49152:johTR5c9CsORSGzFmdT13VohTR5c9CsOALPaAU8TnmarL:8THc9lw1zFmdYTHc9lZajmn9rL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13AB5AE02F7E7505EFABF4A38983B27B05ABAFE516E38816F3794758D1830E909530716
sha3_384: 66fe659d9ac20af7c421f2d160f2ca29e438efd17c60a6dd05a5442f7f822983484744c3446ceb71dbfd7f88c55fcee8
ep_bytes: 558bec6aff6890764400689063420064
timestamp: 2006-05-24 16:57:31

Version Info:
CompanyName: Macrovision Corporation
FileDescription: Setup.exe
FileVersion: 12.0.49974
InternalName: Setup
OriginalFilename: Setup.exe
LegalCopyright: Copyright (C) 2006 Macrovision Corporation
ProductName: InstallShield
ProductVersion: 12.0
OLESelfRegister: 
Translation: 0x0409 0x04b0

Trojan.Generic.1486970 also known as:

How to remove Trojan.Generic.1486970?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.