Should I remove "Trojan.Generic.23057691"?

The Trojan.Generic.23057691 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.23057691 virus can do?

Reads data out of its own binary image
A process created a hidden window
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Generic.23057691?


File Info:
crc32: 20DC4318
md5: 6ab9520395ba5c4e67420cfc265f3549
name: 6AB9520395BA5C4E67420CFC265F3549.mlw
sha1: 20e7a3286011bbd173406c8f2611486f63edc511
sha256: 308e4cea1eff7963006ada4e9df466ec0d82cab5acc8a91192bd7e7d6a0db8ee
sha512: 3532c660d9201eb95792223dfad83104200e230d3db2665a94508af4de05b607176eff82b0cd4a48abb1d7872fcfbdd8ee6584007ab57af9c6b2c5422281d1d5
ssdeep: 6144:ZZABbWqsE/Ao+mv8Qv0LVmwq4FU0fNoy64f:HANwRo+mv8QD4+0V164f
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: sdiageng.dll
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17134.1
FileDescription: Scripted Diagnostics Execution Engine
OriginalFilename: sdiageng.dll
Translation: 0x0409 0x04e4

Trojan.Generic.23057691 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop8.26737
ALYac	Trojan.Generic.23057691
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Trojan.Generic.23057691
Cybereason	malicious.395ba5
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
MicroWorld-eScan	Trojan.Generic.23057691
Ad-Aware	Trojan.Generic.23057691
Comodo	TrojWare.Win32.Spy.Banker.Gen@1qlojk
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Trojan.Generic.23057691
Emsisoft	Trojan.Generic.23057691 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_97%
Microsoft	Trojan:Win32/Zpevdo.B
Arcabit	Trojan.Generic.D15FD51B
GData	Trojan.Generic.23057691
AhnLab-V3	Malware/Win32.Generic.C2605412
McAfee	Artemis!6AB9520395BA
MAX	malware (ai score=89)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H09IH21
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
Fortinet	W32/PossibleThreat

How to remove Trojan.Generic.23057691?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan.Generic.23057691”?