Categories: Trojan

Trojan.Generic.21315337 removal tips

The Trojan.Generic.21315337 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.21315337 virus can do?

Executable code extraction
At least one process apparently crashed during execution
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Checks the system manufacturer, likely for anti-virtualization
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

update.wintoolkit.co.uk

ww1.wintoolkit.co.uk

a.tomx.xyz

How to determine Trojan.Generic.21315337?


File Info:
crc32: 66F83AC2md5: 8d6876fe252341ec249d24ae5e189a71name: WinToolkit.exesha1: 3b00f948e260a66f1e3a5095c0470244a5123e45sha256: ac2a93ac8039a1f30acd16749ff92a1f1b25c20a8e959f5270c8128cb47e596fsha512: ed5dc86283cd84a905ce8b5bee0d44abbe308ef1c2d0b169322c701f02f2e77c6da9aa4aac46a7d2727b320c2b1e30b6c71e6c16c2390c8e817fcb3c0ef7f823ssdeep: 196608:MoKMKPTeUtzMSCB+ipliuY86JxerttUuZVfr3aDaEZMw6MoYOaxTaAQfL1bGLwVZ:MPMKreUtxc+oly86J00uPqG6Mw6lYOaGtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 Legolash2o 2012-16Assembly Version: 1.5.4.7InternalName: WinToolkit_ru.exeFileVersion: 1.5.4.7CompanyName: Legolash2oLegalTrademarks: Comments: Modifying Windows 7 and 8 Images.ProductName: Win ToolkitProductVersion: 1.5.4.7FileDescription: Win ToolkitOriginalFilename: WinToolkit_ru.exeTranslation: 0x0019 0x04e3

Trojan.Generic.21315337 also known as:

MicroWorld-eScan	Trojan.Generic.21315337
McAfee	Artemis!8D6876FE2523
Cylance	Unsafe
AegisLab	Trojan.Win32.Generic.4!c
Arcabit	Trojan.Generic.D1453F09
Invincea	heuristic
ESET-NOD32	a variant of Win32/Packed.EnigmaProtector.J suspicious
TrendMicro-HouseCall	TROJ_GEN.R002C0OCG18
Paloalto	generic.ml
BitDefender	Trojan.Generic.21315337
Avast	Win32:Malware-gen
Ad-Aware	Trojan.Generic.21315337
Emsisoft	Trojan.Generic.21315337 (B)
F-Secure	Trojan.Generic.21315337
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OCG18
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Sophos	Generic PUA DL (PUA)
Webroot	W32.Malware.Gen
MAX	malware (ai score=83)
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Tilken.B!cl
ALYac	Trojan.Generic.21315337
AVware	Trojan.Win32.Generic!BT
Rising	Malware.Undefined!8.C (CLOUD)
SentinelOne	static engine – malicious
GData	Trojan.Generic.21315337
AVG	Win32:Malware-gen
Cybereason	malicious.e25234