Trojan

Trojan.Generic.20028057 information

Malware Removal

The Trojan.Generic.20028057 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.20028057 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

How to determine Trojan.Generic.20028057?


File Info:

name: 15DD542F63A1BB09E52D.mlw
path: /opt/CAPEv2/storage/binaries/055c692353329fd7111a6bd2fb451d5c88e7e3ca79a53902c4005b707ef464d7
crc32: C10E88F9
md5: 15dd542f63a1bb09e52d885257bc8b71
sha1: 03cd4335341d649c7e1339ed793c99c73b0a5589
sha256: 055c692353329fd7111a6bd2fb451d5c88e7e3ca79a53902c4005b707ef464d7
sha512: e7a9c1af16ad7f4df006e272a9026632169dcf8f3f4cc90560e60e8507de80097a9de0b77edc0897af41f583394f9039479eecd659c9c1760bd094dd53a2a4fa
ssdeep: 1536:qGIQcTYJho6+xev91jFGSvYK7rrlXjPFrTPzKvNrAXfl/0:qGUJU1jFGKY2lrFrTLQNrAXfl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1448302EE7C074CAACAF445B1B56D8526453A077F288B1DF47101B2B8AD6214ECDBA733
sha3_384: a3211e103c4a9da1eec23e35a0cde8e53a620008e6ba03dbd6963e057ff4f0aca60c33d558342d336f7346882007b26b
ep_bytes: 60be008040008dbe0090ffff5783cdff
timestamp: 2001-01-29 07:22:04

Version Info:

0: [No Data]

Trojan.Generic.20028057 also known as:

BkavW32.AIDetect.malware1
FireEyeGeneric.mg.15dd542f63a1bb09
ALYacTrojan.Generic.20028057
CylanceUnsafe
SangforRiskware.Win32.Agent.ky
AlibabaTrojan:Win32/Generic.ffee20c6
Cybereasonmalicious.f63a1b
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0OHL21
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.Generic.20028057
MicroWorld-eScanTrojan.Generic.20028057
AvastWin32:Trojan-gen
TencentWin32.Trojan.Agent.Dzuj
Ad-AwareTrojan.Generic.20028057
EmsisoftTrojan.Generic.20028057 (B)
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0OHL21
McAfee-GW-EditionBehavesLike.Win32.Trojan.mc
SophosGeneric ML PUA (PUA)
GDataTrojan.Generic.20028057
MAXmalware (ai score=83)
ArcabitTrojan.Generic.D1319A99
APEXMalicious
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!15DD542F63A1
VBA32Trojan.PEF13C
YandexTrojan.GenAsa!tkmwG6qq1w4
eGambitUnsafe.AI_Score_100%
AVGWin32:Trojan-gen
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.Generic.20028057?

Trojan.Generic.20028057 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment