Trojan

Trojan.Generic.21382866 removal tips

Malware Removal

The Trojan.Generic.21382866 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.21382866 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine Trojan.Generic.21382866?


File Info:

name: 40A3D2F178517DC7B0EE.mlw
path: /opt/CAPEv2/storage/binaries/cd7d664362ad5326cc2bf246d16d7e88427c6b7a07c5b0763399ab30691822f0
crc32: 599B290B
md5: 40a3d2f178517dc7b0ee63408a71c175
sha1: 3179adb3096c28f6d6b44edd423646a731622565
sha256: cd7d664362ad5326cc2bf246d16d7e88427c6b7a07c5b0763399ab30691822f0
sha512: 253b49937823e69c3b9a5f0c7b47ea10d6efa01226a4e8944482961af126d4d745d02e92ac3d643ca78196314f673b5c0df7c87251044b4e855da673916c537e
ssdeep: 192:nU47lL356yxoehOuna99NnxgFtzZhREhgi51RuFXdtYooGJQcYuoeEGfq9t2az7g:j5OKa39xgFTzxi51RuXmVuo87az9a
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12A729E473E9AF61EE6B2177A292B972D57A97DA7187043630860774FFC3B0058E2083D
sha3_384: d6b6a9f1810e3e766847ed9f21418b47eb655dd05965bdb57130b904c53c28dd35df1ddcabd16ca1654bdade7ed33a30
ep_bytes: 60be00d040008dbe0040ffff5783cdff
timestamp: 2062-08-12 06:20:54

Version Info:

FileDescription: Patch created by Tola's Patching Engine
FileVersion: 2.03
LegalCopyright: Copyright © Tola 2k++

Trojan.Generic.21382866 also known as:

DrWebTool.ASEye.2
MicroWorld-eScanTrojan.Generic.21382866
FireEyeGeneric.mg.40a3d2f178517dc7
ALYacTrojan.Generic.21382866
CylanceUnsafe
K7AntiVirusUnwanted-Program ( 004b98821 )
K7GWUnwanted-Program ( 004b98821 )
CrowdStrikewin/malicious_confidence_60% (W)
CyrenW32/Tola.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Tool.TPE.A potentially unsafe
Paloaltogeneric.ml
BitDefenderTrojan.Generic.21382866
SUPERAntiSpywareHack.Tool/Gen-Patcher
AvastWin32:Malware-gen
Ad-AwareTrojan.Generic.21382866
EmsisoftTrojan.Generic.21382866 (B)
ComodoBackdoor.Win32.Agent.ZAC@fl8p
ZillyaTool.TPE.Win32.1079
McAfee-GW-EditionTool-TPatch
SophosTola’s Patching Engine (PUA)
IkarusTrojan.Feutel
JiangminTrojan.Heur.arn
WebrootW32.Trojan.Gen
MAXmalware (ai score=87)
Antiy-AVLTrojan/Generic.ASBOL.A0B5
MicrosoftTrojan:Win32/Occamy.C
GDataTrojan.Generic.21382866
AhnLab-V3Unwanted/Win32.Patch.R23925
McAfeeArtemis!40A3D2F17851
MalwarebytesRiskWare.Tool.CK
APEXMalicious
RisingTrojan.Trafog!8.592 (RDMK:cmRtazoM1kRvDdB3SnPPbIN9PqYr)
SentinelOneStatic AI – Malicious PE
FortinetRiskware/TolasPE
AVGWin32:Malware-gen
Cybereasonmalicious.178517

How to remove Trojan.Generic.21382866?

Trojan.Generic.21382866 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment