What is “Trojan.Generic.20976317”?

The Trojan.Generic.20976317 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.20976317 virus can do?

• Creates RWX memory
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Sniffs keystrokes
• Anomalous binary characteristics

How to determine Trojan.Generic.20976317?

File Info:
crc32: 65C2DEAB
md5: 44c39c7aef714f574afc9fd6923fa368
name: Rome-Total-War-Alexander-V1.91-Trainer-3-MrAntiFun.EXE
sha1: 417c036a782baf644de4d672b8b9bf70b844e20d
sha256: 65f0c1f1dfdf24fe90dcd4d1f97d66d7fdb35331d27e7a8b61061cc1e90dd5b6
sha512: a09cfe0eaf84857011bcde6f1d1a5d0c1852dddab72fe979404f2090439a4e470f51604ad45e862ca7a965959474b1c50029419833572e0c6d3bbf69f6bc3111
ssdeep: 98304:LH0L7VtmWTy5OwsyOBqFY+pWUkU0rLm8qeuPcXi2ub:j0/5Ty5PXtNWpfyZaiBb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan.Generic.20976317 also known as:

How to remove Trojan.Generic.20976317?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.