About “Trojan.Generic.30311820” infection

The Trojan.Generic.30311820 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.30311820 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Generic.30311820?

File Info:
name: D1056EF913E91E8B7A45.mlw
path: /opt/CAPEv2/storage/binaries/9e99f9018c8473401505da1ce287ef817eaf0f0909195baca94cad8bbb699ee1
crc32: 5BD938B8
md5: d1056ef913e91e8b7a4532b33e051639
sha1: 3ee81be8aa877e6699614892fd1038b99c4a2181
sha256: 9e99f9018c8473401505da1ce287ef817eaf0f0909195baca94cad8bbb699ee1
sha512: 66244b6efb3c5fabc87f89edb07af9a11c5305ce9c3c29e666a79503a173084c90ea072d6e3a4cf813d07474aad892cc18859841aff12610d77773fec26ce834
ssdeep: 12288:aLbchyepcjYrV3bjriMUc0Jq7EQ9P0oVPig264r8jaej0xWYR0TfqnUgnJp0lUrY:ebgyibj2tZobs0f2H2j0xWYRT0lUjB
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10F053390CB2068CCF6BF35BD181921D6B9D21D394636CDE4D8DFAA770CA4601FF81669
sha3_384: 05dafc61568181613e9d455b639d260c3e5b7dcb03eca08f658240df1800b32207a0a42fdecc3ac8f2088f48a7918472
ep_bytes: 83ec04c70424000000008b042483c404
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Generic.30311820 also known as:

How to remove Trojan.Generic.30311820?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.