Trojan

Trojan.Generic.16087429 removal tips

Malware Removal

The Trojan.Generic.16087429 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.16087429 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Attempts to modify proxy settings

Related domains:

ekey.sinaapp.com

How to determine Trojan.Generic.16087429?


File Info:

crc32: B6575D92
md5: 062a9d38327262f10230833ac2587858
name: 062A9D38327262F10230833AC2587858.mlw
sha1: fc1ac257630c5ae4088c1b6123f5dd0d84018e8e
sha256: d32cde1ea5b06b9f0bcdbedf1f3f0c684eaf9a0e498f06b963900437a4db7ba4
sha512: dcac93ceef34dea8ef902271d017e2d1341752aa2c9e7cdf4095a131091520a152bcdc0ca15148ef724484dfa430ebf5e16f8ae23cbaa4f055e0680e72ddbd7a
ssdeep: 12288:do26R0npibmGgmKTeGz+CSTfWsMPn2dwObVjnOSxDOhERiDkyhAC:dH6qZHzzyLm2wWbHLR0k
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright(C) 2008-2015 x4fddx7559x6240x6709x6743x5229
FileVersion: 2.6.3.0
CompanyName: x5929x6dafx9f99x817ex5de5x4f5cx5ba4
Comments: x7b80x5355x9ad8x6548x7684x65b0x4e00x4ee3x9a8cx8bc1x7801x8bc6x522bx7cfbx7edf
ProductName: x6b21x4e16x4ee3x9a8cx8bc1x7801x8bc6x522bx7cfbx7edf
ProductVersion: 2.6.3.0
FileDescription: x901ax7528x9a8cx8bc1x7801x8bc6x522bx5f15x64ce
Translation: 0x0804 0x04b0

Trojan.Generic.16087429 also known as:

MicroWorld-eScanTrojan.Generic.16087429
nProtectTrojan.Generic.16087429
ALYacTrojan.Generic.16087429
BitDefenderTrojan.Generic.16087429
Ad-AwareTrojan.Generic.16087429
F-SecureTrojan.Generic.16087429
EmsisoftTrojan.Generic.16087429 (B)
ArcabitTrojan.Generic.DF57985
GDataTrojan.Generic.16087429
IkarusTrojan-PWS.Win32.QQPass

How to remove Trojan.Generic.16087429?

Trojan.Generic.16087429 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment