Trojan.Generic.21315337 removal tips

The Trojan.Generic.21315337 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.21315337 virus can do?

Executable code extraction
At least one process apparently crashed during execution
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Checks the system manufacturer, likely for anti-virtualization
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

update.wintoolkit.co.uk

ww1.wintoolkit.co.uk

a.tomx.xyz

How to determine Trojan.Generic.21315337?


File Info:
crc32: 66F83AC2
md5: 8d6876fe252341ec249d24ae5e189a71
name: WinToolkit.exe
sha1: 3b00f948e260a66f1e3a5095c0470244a5123e45
sha256: ac2a93ac8039a1f30acd16749ff92a1f1b25c20a8e959f5270c8128cb47e596f
sha512: ed5dc86283cd84a905ce8b5bee0d44abbe308ef1c2d0b169322c701f02f2e77c6da9aa4aac46a7d2727b320c2b1e30b6c71e6c16c2390c8e817fcb3c0ef7f823
ssdeep: 196608:MoKMKPTeUtzMSCB+ipliuY86JxerttUuZVfr3aDaEZMw6MoYOaxTaAQfL1bGLwVZ:MPMKreUtxc+oly86J00uPqG6Mw6lYOaG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Legolash2o 2012-16
Assembly Version: 1.5.4.7
InternalName: WinToolkit_ru.exe
FileVersion: 1.5.4.7
CompanyName: Legolash2o
LegalTrademarks: 
Comments: Modifying Windows 7 and 8 Images.
ProductName: Win Toolkit
ProductVersion: 1.5.4.7
FileDescription: Win Toolkit
OriginalFilename: WinToolkit_ru.exe
Translation: 0x0019 0x04e3

Trojan.Generic.21315337 also known as:

MicroWorld-eScan	Trojan.Generic.21315337
McAfee	Artemis!8D6876FE2523
Cylance	Unsafe
AegisLab	Trojan.Win32.Generic.4!c
Arcabit	Trojan.Generic.D1453F09
Invincea	heuristic
ESET-NOD32	a variant of Win32/Packed.EnigmaProtector.J suspicious
TrendMicro-HouseCall	TROJ_GEN.R002C0OCG18
Paloalto	generic.ml
BitDefender	Trojan.Generic.21315337
Avast	Win32:Malware-gen
Ad-Aware	Trojan.Generic.21315337
Emsisoft	Trojan.Generic.21315337 (B)
F-Secure	Trojan.Generic.21315337
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OCG18
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Sophos	Generic PUA DL (PUA)
Webroot	W32.Malware.Gen
MAX	malware (ai score=83)
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Tilken.B!cl
ALYac	Trojan.Generic.21315337
AVware	Trojan.Win32.Generic!BT
Rising	Malware.Undefined!8.C (CLOUD)
SentinelOne	static engine – malicious
GData	Trojan.Generic.21315337
AVG	Win32:Malware-gen
Cybereason	malicious.e25234

How to remove Trojan.Generic.21315337?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Generic.21315337 removal tips