Trojan

Trojan.Generic.15731774 removal guide

Malware Removal

The Trojan.Generic.15731774 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.15731774 virus can do?

  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Generic.15731774?


File Info:

name: 81601109898566CE760A.mlw
path: /opt/CAPEv2/storage/binaries/b4830f00d6ab941be2424b4aec826fc94296ec768d6a301ab94801ab5cda4c69
crc32: A69E776A
md5: 81601109898566ce760a69460803a604
sha1: f4cd5f3a8fb556d393a24de2504155b6d6b867fe
sha256: b4830f00d6ab941be2424b4aec826fc94296ec768d6a301ab94801ab5cda4c69
sha512: 2915b772cbfda89d53067bc7f9491404d5233ee40c1218c3782c6386c7ff0d66e2e9ae72ede279efa2389fee30e49f28b337ecd1ac55e58fbe475e9ca54f52ee
ssdeep: 192:R5ERMpv25+9Ix6FaNJhLkwcud2DH9VwGfctlXO:yg25VEaNJawcudoD7Uy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BFF18E15DC8B1E58C5DF117A3CAF7E0D1961E21DD859CFE8B9CC303BA8C2B543928696
sha3_384: 08a5c8952098129aa9da157c2ade1dce34370eaa3fb5273de4dbd5f7f6e00581f10365b97234943395765661e49720b4
ep_bytes: 60be157040008dbeeb9fffff5789e58d
timestamp: 2013-09-03 07:42:22

Version Info:

0: [No Data]

Trojan.Generic.15731774 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Generic.15731774
FireEyeGeneric.mg.81601109898566ce
CAT-QuickHealBackdoor.Bot.S19311
ALYacTrojan.Generic.15731774
SangforSuspicious.Win32.Save.a
AlibabaTrojan:Win32/Mdrop.03518159
Cybereasonmalicious.989856
VirITTrojan.Win32.MulDrop3.DIFO
CyrenW32/Barys.V.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
APEXMalicious
CynetMalicious (score: 100)
BitDefenderTrojan.Generic.15731774
NANO-AntivirusTrojan.Win32.Drop.eadbdo
SUPERAntiSpywareTrojan.Agent/Gen-Mdrop
AvastWin32:Malware-gen
RisingTrojan.Win32.Muldrop.b (CLOUD)
EmsisoftTrojan.Generic.15731774 (B)
DrWebTrojan.MulDrop3.58280
VIPRETrojan.Generic.15731774
McAfee-GW-EditionBehavesLike.Win32.Agent.xh
Trapminemalicious.high.ml.score
SentinelOneStatic AI – Suspicious PE
GDataTrojan.Generic.15731774
WebrootW32.Trojan.Gen
Antiy-AVLTrojan[PSW]/Win32.Zbot
XcitiumTrojWare.Win32.TrojanDropper.Agent.DT@6n86dy
ArcabitTrojan.Generic.DF00C3E
ViRobotTrojan.Win32.Agent.8192.BH
GoogleDetected
McAfeeArtemis!816011098985
MAXmalware (ai score=99)
VBA32Trojan.MulDrop
MalwarebytesTrojan.Agent.UPX.Generic
TrendMicro-HouseCallTROJ_GEN.R002H0CCP23
YandexTrojan.Agent!D8/t539gn1w
IkarusTrojan.Win32.Tiggre
MaxSecureTrojan.Malware.10913930.susgen
FortinetPossibleThreat
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Generic.15731774?

Trojan.Generic.15731774 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment