Trojan

Should I remove “Trojan.Generic.22262480”?

Malware Removal

The Trojan.Generic.22262480 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.22262480 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to connect to a dead IP:Port (8 unique times)
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates Zeus (Banking Trojan) mutexes
  • Zeus P2P (Banking Trojan)
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.bing.com
ocsp.digicert.com
ajax.aspnetcdn.com
statics-marketingsites-wcus-ms-com.akamaized.net
assets.onestore.ms
img-prod-cms-rt-microsoft-com.akamaized.net

How to determine Trojan.Generic.22262480?


File Info:

crc32: 21F25011
md5: 62315e21e3088f7ec29c008a87cbb26e
name: 62315E21E3088F7EC29C008A87CBB26E.mlw
sha1: 5538f4fd1dd3e2aacac8d85759ec3fa953ff8774
sha256: 44e3cc45150e082302d70ab3781cdda9c880a1c9bdf01d6e2e6cea3382f2770b
sha512: 67a4e56f812194ce94ecc82bb8cb4f41451aff9b5e3cad011bb7608578a479891eab8e347d13f89a257a9ac9e9466e777c2158041cc7f9ab4db869d543cfbae2
ssdeep: 3072:rBgohYkQr0jeLwJr95rJolNAzyP+msVK0ZMjhj5EjPjPjPjPjPjPjjbNeX:LYQqLwhHrWsOP+5VTAR5y777777jb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: wmplayer.exe
FileVersion: 12.0.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 12.0.7601.17514
FileDescription: Windows Media Player
OriginalFilename: wmplayer.exe
Translation: 0x0409 0x04b0

Trojan.Generic.22262480 also known as:

LionicVirus.Win32.Virut.lLSu
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.Generic.22262480
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
Cybereasonmalicious.1e3088
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Evo-gen [Susp]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Generic.22262480
MicroWorld-eScanTrojan.Generic.22262480
TencentWin32.Trojan.Generic.Wloz
Ad-AwareTrojan.Generic.22262480
SophosMal/Generic-S
ComodoMalware@#dsqfqkc9nxjk
BitDefenderThetaGen:NN.ZexaF.34142.lq0@aaOFBqmi
VIPREVirus.Win32.Virut.ce.6 (v)
TrendMicroPE_VIRUX.Q-1
McAfee-GW-EditionBehavesLike.Win32.Virut.ch
FireEyeGeneric.mg.62315e21e3088f7e
EmsisoftTrojan.Generic.22262480 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Patched.Gen
Antiy-AVLTrojan/Generic.ASVirus.2F
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.Generic.22262480
TACHYONTrojan/W32.PornoBlocker.192512.C
Acronissuspicious
McAfeeArtemis!62315E21E308
MAXmalware (ai score=85)
PandaGeneric Suspicious
TrendMicro-HouseCallPE_VIRUX.Q-1
RisingTrojan.Generic@ML.94 (RDML:w/NnPJa7n+C5t6tg7+Uzmg)
IkarusTrojan.Patched
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Evo-gen [Susp]
Paloaltogeneric.ml

How to remove Trojan.Generic.22262480?

Trojan.Generic.22262480 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment