How to remove “Trojan.Generic.30212648”?

The Trojan.Generic.30212648 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.30212648 virus can do?

• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Created a process from a suspicious location
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Trojan.Generic.30212648?

File Info:
name: 34F61ADA500F7018087D.mlw
path: /opt/CAPEv2/storage/binaries/e7df4882e7b0a2559c0ac14f519ccda41f3a840bb82bd7a8a64d5b1002f38c5f
crc32: D21638C5
md5: 34f61ada500f7018087d06af36997d06
sha1: 412d12b8a3cff28378019086576044c29476135d
sha256: e7df4882e7b0a2559c0ac14f519ccda41f3a840bb82bd7a8a64d5b1002f38c5f
sha512: 965d20a55952a51eb78f1b8e9ec1253c04a768110791b272817213257944c0d6d8f0f6d17228f6280c713c51ca92da72ac4fe4809c644b5aee7c0205b69785ed
ssdeep: 768:HT1g40wSXvdMx+v3fUFqFRFo6kF7xNvCMUM33ScGyTjUOXRyrnfuH:Hxg2SfdMw3KeE52ayEj/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15433C0386EE95672D3BBCEB6C6F655C6F935B4233D02980D40DA43840C23F56EDA1A1E
sha3_384: 6b1ab1d719eed8f2b41d97c3d83d0423beebfd6bfc1ecae340ba12ceccf81990cb809082e469bc443a2cb1614be8ad89
ep_bytes: 558d6c248881ecd808000053565733db
timestamp: 2014-05-07 11:58:56

Version Info:
0: [No Data]

Trojan.Generic.30212648 also known as:

How to remove Trojan.Generic.30212648?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.