Trojan

About “Trojan.Generic.30215546” infection

Malware Removal

The Trojan.Generic.30215546 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.30215546 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Arabic (Libya)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Generic.30215546?


File Info:

crc32: C7B797BC
md5: 6778794e6ead74d291162a0bab1b6d4c
name: 6778794E6EAD74D291162A0BAB1B6D4C.mlw
sha1: 3fc5213ea6f228fe6f3d62553fa5f29404d0e451
sha256: 124ccd4fb5d47dc51b374f72e35e9bf0c4524c1204b6b23953c1e982939a9160
sha512: 5a23f82c01454b11662e84046f071e9845fbc89832986417526e9d7e0e2ea5f5d5f885dc85d5712c899d43e490f40c1f8129c87f7c7474e4877b075f73b2fae6
ssdeep: 3072:B45M1B1b74iB0GIs6UOMBuxyWZfN9zudDa93dA3K8jw0BlaEkaxR+k5iLy0ASRe:B4yT1LBIsiiuxNQDa3d/8MQlar/LR
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

InternalName: sajbmoiminu.ihe
ProductVersion: 8.79.590.38
Copyright: Copyrighz (C) 2021, fudkagata
Translation: 0x0129 0x00a9

Trojan.Generic.30215546 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00587f6b1 )
LionicTrojan.Win32.Zenpak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader43.23855
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.47028339
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/RaccoonStealer.7e354541
K7GWTrojan ( 00587f6b1 )
CyrenW32/Kryptik.EWJ.gen!Eldorado
ESET-NOD32a variant of Win32/Kryptik.HMPB
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Packed.Fragtor-9896091-0
KasperskyHEUR:Trojan.Win32.Zenpak.gen
BitDefenderTrojan.Generic.30215546
MicroWorld-eScanTrojan.Generic.30215546
TencentWin32.Trojan.Zenpak.Wozw
Ad-AwareTrojan.Generic.30215546
BitDefenderThetaGen:NN.ZexaF.34170.oq0@ayTRSUnO
McAfee-GW-EditionBehavesLike.Win32.Lockbit.dc
FireEyeGeneric.mg.6778794e6ead74d2
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Zenpak.ioc
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/RaccoonStealer.PC!MTB
GDataTrojan.Generic.30215546
AhnLab-V3CoinMiner/Win.Glupteba.R442577
Acronissuspicious
McAfeePacked-GDT!6778794E6EAD
MAXmalware (ai score=86)
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R06CH0CIN21
RisingTrojan.Generic@ML.80 (RDMK:UBGp1e5l9rZ4TxmN83NNyA)
IkarusWin32.Outbreak
FortinetW32/Packed.GDT!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Generic.30215546?

Trojan.Generic.30215546 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment