Trojan

Trojan.Generic.21504910 information

Malware Removal

The Trojan.Generic.21504910 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Generic.21504910 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config

How to determine Trojan.Generic.21504910?



File Info:

name: 92F9DB3264915A094397.mlw
path: /opt/CAPEv2/storage/binaries/4ffa605e4152e2ec526eaa4f983de83d934a9df5d7520625058ae2cac4f93f08
crc32: 2961863C
md5: 92f9db3264915a094397c7b37e8d8132
sha1: 03c601d40faab71f2e0805d6d5138d29d9ce32fe
sha256: 4ffa605e4152e2ec526eaa4f983de83d934a9df5d7520625058ae2cac4f93f08
sha512: 88b26f60b7f7e0de567caf63ba4187b71c514397311e37491d29e6162774cb790718ddd787d5e40c35ee13816e9aa74d6252ccf05b32e7b6b8a3f8ab4897f38a
ssdeep: 24576:rFmnHYrCwBu4atjkDSHz3gGDS992ePtXjh:gYrCJJv1S99Ltl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19C15DF117A84C07CE4BF02711E7D9A1616BFB8609B798ACBB3D85E4E5A709C06B3171F
sha3_384: e81265cf682ced57c49578f74449dd9b1ab345550512ea23a09190415e4395ebcaf40b42f7fe8591a9c1d8dc285da037
ep_bytes: e838d90000e97ffeffff558bec568b75
timestamp: 2017-03-03 12:24:03


Version Info:

CompanyName: 3DMGAME
FileDescription: FLiNG@3DMGAME Presents - River City Ransom Underground v1.0-Update 2 Plus 8 Trainer
FileVersion: 1.0.0.1
InternalName: River City Ransom Underground v1.0-Update 2 Plus 8 Trainer
LegalCopyright: 风灵月影 (FLiNG@3DMGAME) Copyright (C) 2017
OriginalFilename: River City Ransom Underground v1.0-Update 2 Plus 8 Trainer.exe
ProductName: River City Ransom Underground v1.0-Update 2 Plus 8 Trainer
ProductVersion: 1.0.469.1
Translation: 0x0000 0x04b0

Trojan.Generic.21504910 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.21504910
FireEyeGeneric.mg.92f9db3264915a09
McAfeeArtemis!92F9DB326491
CylanceUnsafe
K7AntiVirusUnwanted-Program ( 004f93581 )
K7GWUnwanted-Program ( 004f93581 )
Cybereasonmalicious.264915
CyrenW32/GameHack.AD.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GameHack.AUM potentially unsafe
APEXMalicious
Paloaltogeneric.ml
BitDefenderTrojan.Generic.21504910
AvastFileRepMalware
Ad-AwareTrojan.Generic.21504910
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Emotet.dc
EmsisoftTrojan.Generic.21504910 (B)
SentinelOneStatic AI – Suspicious PE
GDataTrojan.Generic.21504910
KingsoftWin32.Troj.Generic.v.(kcloud)
MicrosoftPUA:Win32/Vigua.A
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.C2501861
BitDefenderThetaGen:NN.ZexaE.34212.5u0@a8vGX5fj
ALYacTrojan.Generic.21504910
MAXmalware (ai score=84)
VBA32BScope.Trojan.Wacatac
RisingMalware.Heuristic!ET#98% (CLOUD)
YandexTrojan.GenAsa!Z3AtjwsKliA
FortinetRiskware/GameHack
WebrootPua.Gen
AVGFileRepMalware
PandaTrj/CI.A
CrowdStrikewin/grayware_confidence_60% (D)

How to remove Trojan.Generic.21504910?

Trojan.Generic.21504910 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment