Trojan.Generic.21197374 (file analysis)

The Trojan.Generic.21197374 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.21197374 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Drops a binary and executes it
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Installs itself for autorun at Windows startup
• Installs itself for autorun at Windows startup
• Creates a copy of itself
• Uses suspicious command line tools or Windows utilities

How to determine Trojan.Generic.21197374?

File Info:
name: C7DF3CF03AD70C1B455C.mlw
path: /opt/CAPEv2/storage/binaries/18ced8fde69d32691150a40ce5ee1af8e6f8e997a9954517d881f7d6a51d5fc0
crc32: 555D3719
md5: c7df3cf03ad70c1b455c9587f772d9f3
sha1: db0d7ecf48c6fe17a7c5e55438f9287f3c9f5e53
sha256: 18ced8fde69d32691150a40ce5ee1af8e6f8e997a9954517d881f7d6a51d5fc0
sha512: cddfe3b159c1b1f48f86b281f0d301c666365c121ed2724b9843b15e623c240247c5a037222bbe53e4ea72ba7fb18e34e5f31a0dc53948249ce5b8c1cf09d695
ssdeep: 24576:t3PKnT59/qp0qaDyjlsqC8i5aFAZ0g0PQfUTLzHUUL:t/1qUPvU2
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1F795FA06BAB881E0E0B7C57ED5A3962AE9717C5697308AD74245BF1A1F333D0DC39B21
sha3_384: 1b4fd2df576647ce26675e12a0769315574f5ef6b788834b328262bd01f6540f6e28d7eae954a04a6844dd3826eed305
ep_bytes: 4883ec28e88fcc00004883c428e912fe
timestamp: 2012-01-22 16:45:49

Version Info:
CompanyName: Amdocs
FileDescription: Amdocs SIMS
FileVersion: 3, 0, 0, 95
InternalName: Amdocs SIMS
LegalCopyright: Copyright (C) 2006
OriginalFilename: AmdocsSIMS.exe
ProductName: Amdocs SIMS-Version 3, 1, 0, 5 x64
ProductVersion: 3, 0, 0, 95
Translation: 0x0409 0x04b0

Trojan.Generic.21197374 also known as:

How to remove Trojan.Generic.21197374?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.