Trojan

How to remove “Trojan.Generic.21909914”?

Malware Removal

The Trojan.Generic.21909914 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.21909914 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Generic.21909914?


File Info:

crc32: 3A77452A
md5: 898a6dfe7092ba97e47971cd84af2b7d
name: 898A6DFE7092BA97E47971CD84AF2B7D.mlw
sha1: 6511b26e19341ddddefe4994dc6983d8d9e6e41a
sha256: 507c6f5e6d9d474aa6d285ec5e0eb9c39beca27247c7c82f25eeeed9bb67d9bd
sha512: a175a6bdd3ecab7ac5e8ee3f923ac27db8dcc83c2c9a1fcf9917d22a35a6fe0250b811e0085b9b2fcd419745d37961ed20bd7d81c3f2dc5d40d7bb8ebea66179
ssdeep: 1536:gSKe+UpUSD0MfB0hsACZDHDl/audZKWy9bP06aN88KDnKcNjKQgluFC9MF8k:e0UA3AYDHDl/audVcnS8ZDKcFKnluwy
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: lpremove.exe
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.17514
FileDescription: MUI Language pack cleanup
OriginalFilename: lpremove.exe
Translation: 0x0409 0x04b0

Trojan.Generic.21909914 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.21909914
FireEyeGeneric.mg.898a6dfe7092ba97
Qihoo-360Win32/Trojan.Patched.HwoCBrIC
ALYacTrojan.Generic.21909914
CylanceUnsafe
SangforTrojan.Win32.Save.a
BitDefenderTrojan.Generic.21909914
Cybereasonmalicious.e7092b
BitDefenderThetaGen:NN.ZexaF.34590.fq0@aWbqskfi
CyrenW32/Virut.D.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Patched-AMO [Trj]
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:Win32/Virut.5249d756
AegisLabTrojan.Win32.Generic.4!c
RisingVirus.Virut!8.44 (CLOUD)
Ad-AwareTrojan.Generic.21909914
TACHYONTrojan/W32.PornoBlocker.89600
SophosMal/Generic-S
ComodoMalware@#2b05ea278vxpv
F-SecureTrojan.TR/Patched.Gen
VIPREVirus.Win32.Virut.ce.6 (v)
TrendMicroPE_VIRUX.S-1
McAfee-GW-EditionBehavesLike.Win32.Virut.mh
CMCVirus.Win32.Virut.1!O
EmsisoftTrojan.Generic.21909914 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Patched.Gen
Antiy-AVLVirus/Win32.Virut.ce
MicrosoftVirus:Win32/Vigorf.A
ArcabitTrojan.Generic.D14E519A
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.Generic.21909914
CynetMalicious (score: 100)
Acronissuspicious
McAfeeArtemis!898A6DFE7092
MAXmalware (ai score=84)
MalwarebytesMalware.Heuristic.1001
PandaGeneric Suspicious
TrendMicro-HouseCallPE_VIRUX.S-1
TencentWin32.Trojan.Generic.Ecas
IkarusTrojan.Patched
FortinetW32/Virut.CE
AVGWin32:Patched-AMO [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.Generic.21909914?

Trojan.Generic.21909914 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment