Trojan

Trojan.Generic.15870985 malicious file

Malware Removal

The Trojan.Generic.15870985 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.15870985 virus can do?

  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Generic.15870985?


File Info:

crc32: FF04731D
md5: 3b568ba99deea45ee9b66659042bbdfb
name: tmp8w1kwagh
sha1: ef5ce24c7d78c88e811f43bc0e7ab6cebcd79275
sha256: fee129f834a70226195d94313ab507ddb7518579977b75571d1206c1bf592e26
sha512: 9984efca0f3d8e5d215d9cae186ce7ba0e17ebf81213298a030d5c4a2bb6e90a4b40f8c4bc15e4af25e38934db7a69c3d4bf66d58700dad9fe926437d4588dff
ssdeep: 3072:4QIURTXJ9qWxWvGoFhg+pAT72jbJglYwGQe:4sfqWxSr7a7U6lYwVe
type: PE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive

Version Info:

LegalCopyright: (C)
ProductName:
FileVersion:
FileDescription: Producer shd
Translation: 0x0804 0x04e4

Trojan.Generic.15870985 also known as:

MicroWorld-eScanTrojan.Generic.15870985
CAT-QuickHealW32.Ramnit.A
Qihoo-360HEUR/QVM42.0.0837.Malware.Gen
McAfeeArtemis!3B568BA99DEE
CylanceUnsafe
K7AntiVirusTrojan ( 0050b64b1 )
BitDefenderTrojan.Generic.15870985
K7GWTrojan ( 0050b64b1 )
Cybereasonmalicious.99deea
BaiduNSIS.Trojan-Dropper.Agent.c
F-ProtW32/Ramnit.B!Generic
APEXMalicious
AvastWin32:Adware-gen [Adw]
ClamAVWin.Trojan.Ramnit-1847
GDataTrojan.Generic.15870985
KasperskyVirus.Win32.Nimnul.a
AlibabaVirus:Win32/Nimnul.ff724ff9
NANO-AntivirusVirus.Win32.Ramnit.eslalb
RisingVirus.Ramnit!1.9AA5 (CLASSIC)
Endgamemalicious (high confidence)
EmsisoftAdware.Dropper (A)
F-SecureMalware.W32/Ramnit.CD
DrWebAdware.Searcher.1222
ZillyaAdware.Agent.Win32.85624
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.BadFile.nc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.3b568ba99deea45e
SophosMal/Agent-AUG
IkarusVirus.Ramnit
CyrenW32/Ramnit.B!Generic
WebrootW32.Malware.Heur
AviraW32/Ramnit.CD
MAXmalware (ai score=89)
Antiy-AVLGrayWare/Win32.StartPage.gen
ArcabitTrojan.Generic.DF22C09
ZoneAlarmVirus.Win32.Nimnul.a
MicrosoftVirus:Win32/Ramnit.A
Acronissuspicious
VBA32Virus.Win32.Nimnul.a
ALYacTrojan.Generic.15870985
Ad-AwareTrojan.Generic.15870985
MalwarebytesTrojan.ChinAd
ESET-NOD32a variant of NSIS/TrojanDropper.Agent.BT
SentinelOneDFI – Suspicious PE
AVGWin32:Adware-gen [Adw]
CrowdStrikewin/malicious_confidence_100% (D)
MaxSecureVirus.Nimnul.A

How to remove Trojan.Generic.15870985?

Trojan.Generic.15870985 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment