Trojan

About “Trojan.Generic.30196950” infection

Malware Removal

The Trojan.Generic.30196950 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.30196950 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Polish
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Generic.30196950?


File Info:

crc32: A28FDF37
md5: dfa826b364f7a1a9d9bd3a96a4ff2c67
name: DFA826B364F7A1A9D9BD3A96A4FF2C67.mlw
sha1: b3a74425478fd77bfb759a70b1615686f4a7d2fc
sha256: cfa0f0039bf9495aae2c8f3500a5ce894daf1e72773f7e7faf468a5f1d11d80c
sha512: bfbf6610ebf452b30eb2221740c8cc62638ca3a9b16e9c5a1f01c3f9cae7e2cea9c35af072b6af026a60644facb2a723cba74d549620ee58ece584d1aae93e89
ssdeep: 6144:aRf2SEvtIEp5Ja54F/VtKiFa8EVITOPT1jNZtwzDPIq1nkCyC:Y2SEvtI0564lKiE8E601jNZtiI5CyC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x1209 0x04b8

Trojan.Generic.30196950 also known as:

LionicTrojan.Win32.Stop.j!c
Elasticmalicious (high confidence)
DrWebTrojan.Inject4.16647
ClamAVWin.Packed.Fragtor-9895692-0
ALYacTrojan.Generic.30196950
MalwarebytesTrojan.MalPack.GS
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/DelfInject.d8f72ce8
K7GWTrojan ( 00585f331 )
K7AntiVirusTrojan ( 00585f331 )
CyrenW32/Trojan.HPPP-7147
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HMOS
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Ransom.Win32.Stop.gen
BitDefenderTrojan.Generic.30196950
NANO-AntivirusTrojan.Win32.Stop.jcgfuv
ViRobotTrojan.Win32.Z.Stop.399872.A
MicroWorld-eScanTrojan.Generic.30196950
TencentWin32.Trojan.Stop.Wvum
Ad-AwareTrojan.Generic.30196950
SophosML/PE-A
ComodoMalware@#187h2cyuw5evc
BitDefenderThetaGen:NN.ZexaF.34170.yu1@a4f2difO
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.fh
FireEyeGeneric.mg.dfa826b364f7a1a9
EmsisoftTrojan.Agent (A)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Stop.bmh
WebrootW32.Trojan.Gen
MicrosoftTrojan:Win32/DelfInject.SS!MTB
ArcabitTrojan.Generic.D1CCC4D6
GDataTrojan.Generic.30196950
AhnLab-V3CoinMiner/Win.Glupteba.R442510
Acronissuspicious
McAfeePacked-GDT!DFA826B364F7
MAXmalware (ai score=85)
VBA32Malware-Cryptor.Azorult.gen
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_Stop.R002C0DIP21
RisingTrojan.Kryptik!1.D9C0 (CLASSIC)
YandexTrojan.Igent.bWDiIQ.9
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.HMOO!tr
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml

How to remove Trojan.Generic.30196950?

Trojan.Generic.30196950 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment