Trojan

How to remove “Trojan.Generic.21853695”?

Malware Removal

The Trojan.Generic.21853695 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.21853695 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Tries to unhook or modify Windows functions monitored by Cuckoo

How to determine Trojan.Generic.21853695?


File Info:

crc32: 2B3AC6BA
md5: 7d36f7ab91d4c6e1fed3dc93be281f9b
name: 7D36F7AB91D4C6E1FED3DC93BE281F9B.mlw
sha1: d1019bd668f2976b2a221f007401db6aa9fc6f19
sha256: 60bd544d8b23181895ee789c2f2fb55ac0f6e9f4bb52186075b2f2cc77063675
sha512: 6e6909243a19c1f7f120ff54bad02d67f220196d23f4b84f71a0ebe57d781288bfa774a21f7592a35b3fe1166d15bc78713cae8b2eea89179ebcf3f0ab266927
ssdeep: 24576:YIYGmHKwJ0ozeW3KBEA+U2D5/Zn+XPi5xX7SipY+yC8O1Xbe/vxx9o:EVFeiSw7/Z+/i5xLSip+C8zy
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan.Generic.21853695 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.Generic.21853695
CylanceUnsafe
SangforTrojan.Win32.QQpass.1
AlibabaTrojan:Win32/QQWare.87fb1db3
Cybereasonmalicious.b91d4c
CyrenW32/Agent.EW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/QQWare.AA
APEXMalicious
AvastWin32:Malware-gen
BitDefenderTrojan.Generic.21853695
MicroWorld-eScanTrojan.Generic.21853695
TencentMalware.Win32.Gencirc.1149485b
Ad-AwareTrojan.Generic.21853695
SophosGeneric ML PUA (PUA)
ComodoTrojWare.Win32.Agent.OSCF@5rs7jr
BitDefenderThetaGen:NN.ZexaF.34170.JnGfaaeHV6fH
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.7d36f7ab91d4c6e1
EmsisoftTrojan.Generic.21853695 (B)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASCommon.FA
KingsoftWin32.Heur.KVM099.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D14D75FF
GDataWin32.Trojan.PSE.19Q2126
AhnLab-V3PUP/Win32.DownloadManager.R155589
Acronissuspicious
McAfeeArtemis!7D36F7AB91D4
MAXmalware (ai score=86)
VBA32BScope.Trojan.Fuerboos
MalwarebytesMalware.AI.3649070729
PandaTrj/Genetic.gen
RisingHackTool.GameHack!1.B2A6 (CLASSIC)
YandexTrojan.GenAsa!Z+SZQy9nL3Q
IkarusTrojan.Win32.QQWare
MaxSecureTrojan.Malware.74472893.susgen
FortinetW32/QQWare.AA!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Generic.21853695?

Trojan.Generic.21853695 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment