Trojan.Generic.1957168 malicious file

The Trojan.Generic.1957168 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.1957168 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Generic.1957168?


File Info:
crc32: 5E5AB42A
md5: 072038f87cdcf84d6d9db409546877db
name: 072038F87CDCF84D6D9DB409546877DB.mlw
sha1: 22472546fe2e97e5204d39d9179bde00e6da7c33
sha256: 85235702bf8641fbb156496b8337b4472beb91cadaa02be37a3791d8877e12e3
sha512: 794821c44c9647ed8313439dbd9d2e240acc267e60189b78ba6029acf5187a0fd6a50d1cd2c33610893812e8a89470c7fe8e780fecc1e73fd992c16a661d2a45
ssdeep: 3072:eZuO97Mu9bNVqhdeutwaMAQK78iNtoAdmWzD5zKFmjSw3atJfo7z:IfpVqhkutNZpgmDtKFmjSw3atJwn
type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Copyright Panda Inc.
InternalName: AutoFire
FileVersion: 2.05.0002
CompanyName: Panda Inc.
LegalTrademarks: AutoFire
ProductName: AutoFire
ProductVersion: 2.05.0002
OriginalFilename: AutoFire.exe

Trojan.Generic.1957168 also known as:

Bkav	W32.AIDetect.malware2
ALYac	Trojan.Generic.1957168
Cylance	Unsafe
Zillya	Backdoor.Feardoor.Win32.36
Alibaba	Backdoor:Win32/Feardoor.82eeba38
Cybereason	malicious.87cdcf
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Backdoor.Win32.Feardoor.l
BitDefender	Trojan.Generic.1957168
NANO-Antivirus	Trojan.Win32.Feardoor.jfca
ViRobot	Backdoor.Win32.A.Feardoor.116736.A
MicroWorld-eScan	Trojan.Generic.1957168
Tencent	Win32.Backdoor.Feardoor.Dkq
Ad-Aware	Trojan.Generic.1957168
Sophos	Generic PUA CC (PUA)
Comodo	Backdoor@#26cpijhsr3y59
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PK421
McAfee-GW-Edition	GenericRXHM-ZR!0DE046E59D23
FireEye	Trojan.Generic.1957168
Emsisoft	Trojan.Generic.1957168 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Backdoor/Feardoor.cq
Webroot	W32.Malware.Gen
eGambit	Generic.Malware
Antiy-AVL	Trojan[Backdoor]/Win32.Feardoor
Microsoft	Trojan:Win32/Occamy.C85
Arcabit	Trojan.Generic.D1DDD30
ZoneAlarm	Backdoor.Win32.Feardoor.l
GData	Trojan.Generic.1957168
McAfee	Artemis!072038F87CDC
MAX	malware (ai score=99)
VBA32	Backdoor.Feardoor
Malwarebytes	Malware.Heuristic.1001
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PK421
Yandex	Backdoor.Feardoor!UZmzvfcw9AA
Ikarus	Backdoor.Win32.Feardoor
MaxSecure	Trojan.Malware.155336.susgen
Fortinet	W32/Feardoor.L!tr.bdr
AVG	FileRepMalware

How to remove Trojan.Generic.1957168?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Generic.1957168 malicious file