Categories: Trojan

Trojan.Generic.20928937 removal tips

The Trojan.Generic.20928937 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.20928937 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Sniffs keystrokes
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

sell.fqapps.com

dxwl.blog.163.com

www.bing.com

How to determine Trojan.Generic.20928937?


File Info:
crc32: BE8B7A1Amd5: 0d867bf86a1392e053224c1165065e4aname: hl3.5.8.0.exesha1: 191f5f2ee4433ed2de0ba280968cee9d42bc2a53sha256: 8415b5a7f56652277716ac3bb0493f3d21c45df35a1596a6e35d0e89ebdc877esha512: 9697c0ba321f3cbbaf59d780ed5b8f6c8c232a621365427cc3f02f4788f095d51bbc80034cd09a34a60d300eefdd2c4eefa7a131956b2fd79cdb2f95a67a4782ssdeep: 24576:SCVmozdsA7GGHhDSP2b73mEiIswtI/IVhsN:Sq4G1yIBtI/IV8type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: x5faex4fe1x6dd8x5ba2x7cfbx7edfx7ba1x7406x52a9x624bFileVersion: 3.5.8.0CompanyName: x5faex4fe1x6dd8x5ba2x7cfbx7edfx7ba1x7406x52a9x624bComments: x5faex4fe1x6dd8x5ba2x7cfbx7edfx7ba1x7406x52a9x624bProductName: x5faex4fe1x6dd8x5ba2x7cfbx7edfx7ba1x7406x52a9x624bProductVersion: 3.5.8.0FileDescription: x5faex4fe1x6dd8x5ba2x7cfbx7edfx7ba1x7406x52a9x624bTranslation: 0x0804 0x04b0

Trojan.Generic.20928937 also known as:

MicroWorld-eScan	Trojan.Generic.20928937
FireEye	Generic.mg.0d867bf86a1392e0
CAT-QuickHeal	Risktool.Flystudio.18826
McAfee	Artemis!0D867BF86A13
Cylance	Unsafe
BitDefender	Trojan.Generic.20928937
Cybereason	malicious.86a139
TrendMicro	TROJ_GEN.R01FC0PAH20
BitDefenderTheta	Gen:NN.ZexaF.34090.inKfaCaE!2oH
F-Prot	W32/Trojan.CLL.gen!Eldorado
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Zusy-6840460-0
GData	Trojan.Generic.20928937
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Elenoocka.eqbhzx
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazoHhaOo/VNTp4T7gOsSSnSb)
Ad-Aware	Trojan.Generic.20928937
Sophos	Generic PUA BJ (PUA)
Comodo	Malware@#jjqtjz21tlzp
F-Secure	Heuristic.HEUR/AGEN.1009845
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	GenericRXAM-GE!30919DE25FA8
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.Generic.20928937 (B)
SentinelOne	DFI – Malicious PE
Cyren	W32/Trojan.CLL.gen!Eldorado
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1009845
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Generic.D13F59A9
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Wacatac.C!ml
VBA32	BScope.Trojan.Casur
ALYac	Trojan.Generic.20928937
MAX	malware (ai score=89)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R01FC0PAH20
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/FlyStudio
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)