What is “Trojan.Generic.2928047”?

The Trojan.Generic.2928047 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.2928047 virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Generic.2928047?


File Info:
name: 2D1F50A73703F27CA2D1.mlw
path: /opt/CAPEv2/storage/binaries/1b98bb4cd949c487553703e036e12954f15304f1183b4bd23dddea526ef456ce
crc32: 9B5B6986
md5: 2d1f50a73703f27ca2d106b7e3a4d17a
sha1: 0bd89cc5909a1e83b9af61ef36ce7f42ab169940
sha256: 1b98bb4cd949c487553703e036e12954f15304f1183b4bd23dddea526ef456ce
sha512: dfe23a8416391b234921289f18eecad0a292ee7ae2eeb462240c717359c3d7d984f4caacf28de65d3a95c54bc22017ec0f85f872115869e9b0983bd691d36b91
ssdeep: 3072:odjhdrZfaG+Mv9jx6osttHmVOvD1IT2Yfve+iIc9h3IeLa9U9d4K8bGL4S:odLL2zEMD1x+iblI62U
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12214EA9D63409B46EA191DFA50715B93AF81BD1437BF8F2230B71B2B3913EE0E616427
sha3_384: e9b927743a57935ff2dad2ba492154d1fd5502cc724e31790bacab6e876c565e8624cad01f0f2ce4ea0d2822b68021bc
ep_bytes: 6894114000e8f0ffffff000000000000
timestamp: 2009-12-30 22:42:06

Version Info:
Translation: 0x0409 0x04b0
CompanyName: UxKYYRFrfyCP1ejJ
ProductName: GoCcca
FileVersion: 7.03.0005
ProductVersion: 7.03.0005
InternalName: QHW4hTvAXUV0If
OriginalFilename: QHW4hTvAXUV0If.exe

Trojan.Generic.2928047 also known as:

Bkav	W32.CNCalgeri.Heur
Lionic	Trojan.Win32.Generic.l4p9
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Multi.36
MicroWorld-eScan	Trojan.Generic.2928047
FireEye	Generic.mg.2d1f50a73703f27c
ALYac	Trojan.Generic.2928047
Zillya	Trojan.Agent.Win32.69196
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	EmailWorm ( 003c363a1 )
K7GW	EmailWorm ( 003c363a1 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Trojan.DOOY-5277
Symantec	Packed.Generic.307
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Injector.AJZ
ClamAV	Win.Dropper.DarkKomet-9395758-0
Kaspersky	Trojan-PSW.Win32.Agent.ovq
BitDefender	Trojan.Generic.2928047
Ad-Aware	Trojan.Generic.2928047
Emsisoft	Trojan.Generic.2928047 (B)
Comodo	TrojWare.Win32.Kreeper.~VKA@1r0eqd
VIPRE	Trojan.Generic.2928047
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.cc
SentinelOne	Static AI – Malicious PE
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Mal/VBCheMan-C
Ikarus	Virus.Win32.VBInject
Google	Detected
Antiy-AVL	Trojan/Generic.ASMalwS.4B
Microsoft	VirTool:Win32/VBInject.DD
Arcabit	Trojan.Generic.D2CADAF
ViRobot	Trojan.Win32.A.PSW-Agent.196292
ZoneAlarm	Trojan-PSW.Win32.Agent.ovq
GData	Trojan.Generic.2928047
Cynet	Malicious (score: 100)
McAfee	W32/Rimecud.gen.aw
VBA32	Trojan.VB.FlyCryptor
APEX	Malicious
Rising	Malware.Undefined!8.C (TFE:3:yP6sUTJdOfK)
Yandex	Trojan.GenAsa!3fBPkJ4CT2Q
MAX	malware (ai score=85)
Fortinet	W32/Refroso.BLC!tr
Cybereason	malicious.73703f
Panda	Trj/Genetic.gen

How to remove Trojan.Generic.2928047?

Trojan.Generic.2928047 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X