What is “Trojan.Generic.23097131”?

The Trojan.Generic.23097131 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.23097131 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Generic.23097131?


File Info:
crc32: 6D5F3FE5
md5: 495320e6088045f4c79e1e759e9f7cb5
name: 495320E6088045F4C79E1E759E9F7CB5.mlw
sha1: dca63fc52d342b72fb7b3df4b639bdaca93bb061
sha256: 0469bcdb0352eb7f06325e3a02aa3bd9b560de723353e099793ddce150f9fab6
sha512: e0504213851594d911cb2aba76e0902d626f694892e1c9c9bd1a69a16025ba5beea70b3c44811c4b585ada30ba56f0dd96d11694afb09897f19c0af1d9ba7cdb
ssdeep: 12288:etUabY+oKRaCMsmmcfJrPaGCM6LbrwY+g7slLhrPJvQf0V61sXAuvTvUVVbkiUk:2Ug9UCMsBsYGCTjP+w0LhrPJvQf0V61
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: MsSpellCheckingFacility
FileVersion: 6.3.9600.18639 (winblue_ltsb.170325-0600)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.3.9600.18639
FileDescription: Microsoft Spell Checking Facility
OriginalFilename: MsSpellCheckingFacilitydl.exe
Translation: 0x0409 0x04b0

Trojan.Generic.23097131 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Trojan.Generic.23097131
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Trojan:Win32/SuspPack.95789503
Cybereason	malicious.608804
Cyren	W32/SuspPack.FW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Virtu-F [Inf]
BitDefender	Trojan.Generic.23097131
MicroWorld-eScan	Trojan.Generic.23097131
Ad-Aware	Trojan.Generic.23097131
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34170.OC0@aCUYnOji
McAfee-GW-Edition	BehavesLike.Win32.Virut.jh
FireEye	Generic.mg.495320e6088045f4
Emsisoft	Trojan.Generic.23097131 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D1606F2B
GData	Trojan.Generic.23097131
McAfee	Artemis!495320E60880
Fortinet	W32/CoinMiner.F
AVG	Win32:Virtu-F [Inf]

How to remove Trojan.Generic.23097131?

Trojan.Generic.23097131 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X