Trojan.Generic.17914347 malicious file

The Trojan.Generic.17914347 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.17914347 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• A process created a hidden window
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Uses Windows utilities for basic functionality
• Sniffs keystrokes
• Created a process from a suspicious location
• Collects and encrypts information about the computer likely to send to C2 server
• Deletes executed files from disk

How to determine Trojan.Generic.17914347?

File Info:
name: 7732D5349A0CFA1C3E4B.mlw
path: /opt/CAPEv2/storage/binaries/6e485d34aba9d1f22ccc1b4724cb4aa245ee33bf5d10c804d0c6e08963155398
crc32: B3B2758E
md5: 7732d5349a0cfa1c3e4bcfa0c06949e4
sha1: 3d50e2e29519c9adf74981b98e863dfc72b0157b
sha256: 6e485d34aba9d1f22ccc1b4724cb4aa245ee33bf5d10c804d0c6e08963155398
sha512: e92d4b68fbcc5c79be5ac04a21f93510b4ba01ece2ad5491fe6522834ade5c702c048174f0b7ff80d016494e2e76f5574e154966df6503cd8eea63007f858180
ssdeep: 12288:P9QD3jrNuB4HiBO5zMHhcX8TiY3ZOR50:6jjrNuyCBYzMHEUiY3ZOR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1939401053B134260E64915BBC0DB062403F49F836673F75E7EC8731E8A926E39B95D8B
sha3_384: 728c64cedd4d6ef246e7e7ff4d9afc0d4101eab1e9197970bcc785d6177baf4852c1a360026979b660945302fdfdeeca
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-07-29 23:22:04

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: Microsoft
FileDescription: Word
FileVersion: 1.0.0.0
InternalName: WordA.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: WordA.exe
ProductName: Word
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan.Generic.17914347 also known as:

How to remove Trojan.Generic.17914347?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.