Trojan

Trojan.Generic.27193 removal tips

Malware Removal

The Trojan.Generic.27193 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.27193 virus can do?

  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Installs itself for autorun at Windows startup
  • Installs itself for autorun at Windows startup
  • Created a service that was not started

How to determine Trojan.Generic.27193?


File Info:

name: E108DB83EF1C1597FB5D.mlw
path: /opt/CAPEv2/storage/binaries/d822fc9fb3d236149edced0f21f9ca213e8cfaf6b32acadaab04138e47036b52
crc32: 97E4F739
md5: e108db83ef1c1597fb5d0b9d0e9ce465
sha1: 2b36e8bf406cdf806432155632b85dc8442ca576
sha256: d822fc9fb3d236149edced0f21f9ca213e8cfaf6b32acadaab04138e47036b52
sha512: 7293598de591773b4f2ec09bcdeace0ee94d846a51821a414fca4767a93080a6537a7c4314854df735ed1b2a12f17579cea5767230d428e9fed2ed9924bd381b
ssdeep: 12288:lOOZpUtlwX+zc7V5Rn1JyfPzOOZpUtlwX+zc7V5Rn1JyfP:nZhNrRCfPxZhNrRCfP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157757D2BF6D08433D223167C8C9B97A99D2ABE502E2954463FF91D8C4F3D78139262D7
sha3_384: f7697f90be9cda50cdac2ff764076836e6c7c37a2ec6e2a4d33a1a3eb53337c27bb1520558374a3f46954ac5098521fb
ep_bytes: 558bec83c4f033c08945f0b8389b4500
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan.Generic.27193 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.47130202
FireEyeGeneric.mg.e108db83ef1c1597
CAT-QuickHealTrojan.Generic.27193
ALYacTrojan.GenericKD.47130202
CylanceUnsafe
ZillyaWorm.Fasong.Win32.8
K7AntiVirusTrojan ( 0000ca6e1 )
K7GWTrojan ( 0000ca6e1 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Trojan-PSW.OLGames.bm
CyrenW32/Worm.TXBC-8767
SymantecTrojan.Benfgame
ESET-NOD32Win32/Fasong.C
APEXMalicious
ClamAVWin.Malware.Fasong-9910797-0
KasperskyWorm.Win32.Fasong.c
BitDefenderTrojan.GenericKD.47130202
NANO-AntivirusTrojan.Win32.Fasong.cfoac
AvastWin32:CrypterX-gen [Trj]
TencentTrojan.Win32.BitCoinMiner.la
Ad-AwareTrojan.GenericKD.47130202
SophosML/PE-A + Troj/Fasong-A
ComodoWorm.Win32.Fasong.C@1nqv
DrWebWin32.HLLW.Fasong.2
VIPRETrojan.Win32.Generic.pak!cobra
TrendMicroWORM_FASONG.C
McAfee-GW-EditionBehavesLike.Win32.Fasong.tt
EmsisoftTrojan.GenericKD.47130202 (B)
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKD.47130202
JiangminTrojan/WebPass.01
AviraADWARE/Adware.Gen
MAXmalware (ai score=82)
Antiy-AVLTrojan/Generic.ASMalwS.88B5C
KingsoftHeur.SSC.2800857.1216.(kcloud)
ViRobotWorm.Win32.A.Fasong.182372
MicrosoftWorm:Win32/Fasong.C
CynetMalicious (score: 100)
AhnLab-V3Worm/Win32.Fasong.R192909
Acronissuspicious
McAfeeW32/Fasong.worm
VBA32Worm.Fasong
MalwarebytesTrojan.MalPack
TrendMicro-HouseCallWORM_FASONG.C
RisingWorm.Fasong!1.D14C (CLASSIC)
YandexTrojan.GenAsa!u+akRDxtPNE
IkarusWorm.Win32.Fasong
FortinetW32/Fasong.FEE7!tr
BitDefenderThetaAI:Packer.5260256221
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.3ef1c1
PandaTrj/Genetic.gen

How to remove Trojan.Generic.27193?

Trojan.Generic.27193 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment