Trojan

Trojan.Generic.21988372 (file analysis)

Malware Removal

The Trojan.Generic.21988372 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Generic.21988372 virus can do?

  • Unconventionial binary language: Arabic (Algeria)
  • Unconventionial language used in binary resources: Arabic (Saudi Arabia)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Generic.21988372?



File Info:

crc32: D0440EB2
md5: 3ac01f3187f4bb4c8cc1cf80e363b2f0
name: 3AC01F3187F4BB4C8CC1CF80E363B2F0.mlw
sha1: 0b12e50226117f4606d569c39ade79cfb19ca964
sha256: 07ee7e9d3de744a9c9062dc2175779b8e5f616f96d932790b3f66e19f0410ace
sha512: 17eca78a5d62e3587c799c22588bd6e576aef02264d4312c97f7ea36efcd78b34c5f4afa6167bc04897681af636b33a2ba2fa08f869fc08ec2adadcb5356bb79
ssdeep: 192:gMx3/yUPVRTRUlyeX84muf85kmMAHAIGR/QJx2eO0W1WxXW9psLBWyPoLgLVKub:gKPUfX6N5H8wxtkIxXW9psLBWFWVa
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: REGSVR32
FileVersion: 5.1.2600.5512 (xpsp.080413-2105)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 5.1.2600.5512
FileDescription: Microsoft(C) Register Server
OriginalFilename: REGSVR32.EXE
Translation: 0x0401 0x04b0

Trojan.Generic.21988372 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.21988372
FireEyeGeneric.mg.3ac01f3187f4bb4c
ALYacTrojan.Generic.21988372
CylanceUnsafe
AegisLabVirus.Win32.Virut.lCU0
SangforTrojan.Win32.Save.a
BitDefenderTrojan.Generic.21988372
Cybereasonmalicious.187f4b
CyrenW32/Virut.D.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Virtu-F [Inf]
AlibabaVirus:Win32/Virut.b2115fd1
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
RisingVirus.Virut!8.44 (CLOUD)
Ad-AwareTrojan.Generic.21988372
EmsisoftTrojan.Generic.21988372 (B)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Virut.pz
SophosML/PE-A
IkarusVirus.Win32.Virut
MAXmalware (ai score=88)
MicrosoftTrojan:Win32/GandCrypt.PVB!MTB
ArcabitTrojan.Generic.D14F8414
GDataTrojan.Generic.21988372
CynetMalicious (score: 100)
Acronissuspicious
McAfeeArtemis!3AC01F3187F4
MalwarebytesMalware.Heuristic.1001
TencentWin32.Trojan.Patched.Lnem
SentinelOneStatic AI – Malicious PE
FortinetW32/Virtu.F
BitDefenderThetaGen:NN.ZexaF.34590.cq1@aa1jnWkG
AVGWin32:Virtu-F [Inf]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Virus.Virut.HgIASOYA

How to remove Trojan.Generic.21988372?

Trojan.Generic.21988372 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment