Categories: Trojan

Trojan.Generic.21504910 information

The Trojan.Generic.21504910 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.21504910 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Enumerates running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config

How to determine Trojan.Generic.21504910?


File Info:
name: 92F9DB3264915A094397.mlwpath: /opt/CAPEv2/storage/binaries/4ffa605e4152e2ec526eaa4f983de83d934a9df5d7520625058ae2cac4f93f08crc32: 2961863Cmd5: 92f9db3264915a094397c7b37e8d8132sha1: 03c601d40faab71f2e0805d6d5138d29d9ce32fesha256: 4ffa605e4152e2ec526eaa4f983de83d934a9df5d7520625058ae2cac4f93f08sha512: 88b26f60b7f7e0de567caf63ba4187b71c514397311e37491d29e6162774cb790718ddd787d5e40c35ee13816e9aa74d6252ccf05b32e7b6b8a3f8ab4897f38assdeep: 24576:rFmnHYrCwBu4atjkDSHz3gGDS992ePtXjh:gYrCJJv1S99Ltltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19C15DF117A84C07CE4BF02711E7D9A1616BFB8609B798ACBB3D85E4E5A709C06B3171Fsha3_384: e81265cf682ced57c49578f74449dd9b1ab345550512ea23a09190415e4395ebcaf40b42f7fe8591a9c1d8dc285da037ep_bytes: e838d90000e97ffeffff558bec568b75timestamp: 2017-03-03 12:24:03
Version Info:
CompanyName: 3DMGAMEFileDescription: FLiNG@3DMGAME Presents - River City Ransom Underground v1.0-Update 2 Plus 8 TrainerFileVersion: 1.0.0.1InternalName: River City Ransom Underground v1.0-Update 2 Plus 8 TrainerLegalCopyright: 风灵月影 (FLiNG@3DMGAME) Copyright (C) 2017OriginalFilename: River City Ransom Underground v1.0-Update 2 Plus 8 Trainer.exeProductName: River City Ransom Underground v1.0-Update 2 Plus 8 TrainerProductVersion: 1.0.469.1Translation: 0x0000 0x04b0

Trojan.Generic.21504910 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Generic.21504910
FireEye	Generic.mg.92f9db3264915a09
McAfee	Artemis!92F9DB326491
Cylance	Unsafe
K7AntiVirus	Unwanted-Program ( 004f93581 )
K7GW	Unwanted-Program ( 004f93581 )
Cybereason	malicious.264915
Cyren	W32/GameHack.AD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GameHack.AUM potentially unsafe
APEX	Malicious
Paloalto	generic.ml
BitDefender	Trojan.Generic.21504910
Avast	FileRepMalware
Ad-Aware	Trojan.Generic.21504910
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Emotet.dc
Emsisoft	Trojan.Generic.21504910 (B)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.Generic.21504910
Kingsoft	Win32.Troj.Generic.v.(kcloud)
Microsoft	PUA:Win32/Vigua.A
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C2501861
BitDefenderTheta	Gen:NN.ZexaE.34212.5u0@a8vGX5fj
ALYac	Trojan.Generic.21504910
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Wacatac
Rising	Malware.Heuristic!ET#98% (CLOUD)
Yandex	Trojan.GenAsa!Z3AtjwsKliA
Fortinet	Riskware/GameHack
Webroot	Pua.Gen
AVG	FileRepMalware
Panda	Trj/CI.A
CrowdStrike	win/grayware_confidence_60% (D)