How to remove "Trojan.Generic.30327672"?

The Trojan.Generic.30327672 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.30327672 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Tries to suspend Cuckoo threads to prevent logging of malicious activity
Installs itself for autorun at Windows startup

Related domains:

z.whorecord.xyz

fget-career.com

a.tomx.xyz

How to determine Trojan.Generic.30327672?


File Info:
crc32: 3CDA34DC
md5: 47c116db3f0e5d536352aaecbbc7d6b6
name: 47C116DB3F0E5D536352AAECBBC7D6B6.mlw
sha1: 9aab8a86b946ba6eaf513206e1c594fda27ae646
sha256: bd5f19d54c0d5de713d609653e64116e07af8037a322f803850c9cb1e6a03c90
sha512: 82d6325993b4bbddf1c1db66d47de0430ad67338303708889fe0914aec6259579501c5b5ca0ad8cd18262d8a722f327ded0ad62a8c4559b8293cfaee3ab03aad
ssdeep: 3072:Y1HXx5/ddPgS99gzAMuAwUJJRD5jw2YBc7ipa+P/5y+mgZiTnBz/n2:85/DgfnuANJRDK2Y7/5y+VsZ/
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Trojan.Generic.30327672 also known as:

Bkav	W32.RammitNNA.PE
Lionic	Virus.Win32.Nimnul.tn4U
Elastic	malicious (high confidence)
DrWeb	Win32.Rmnet
ClamAV	Win.Trojan.Ramnit-1847
CAT-QuickHeal	W32.Ramnit.A
ALYac	Win32.Ramnit
Cylance	Unsafe
Zillya	Virus.Nimnul.Win32.1
Sangfor	Virus.Win32.Ramnit.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Virus:Win32/Ramnit.gen2
K7GW	Trojan ( 004bcce41 )
K7AntiVirus	Trojan ( 004bcce41 )
Baidu	Win32.Virus.Nimnul.a
Cyren	W32/Ramnit.B!Generic
Symantec	W32.Ramnit!inf
ESET-NOD32	Win32/Ramnit.A
Zoner	Trojan.Win32.Ramnit.23698
APEX	Malicious
Avast	Win32:RmnDrp [Inf]
Cynet	Malicious (score: 100)
Kaspersky	Virus.Win32.Nimnul.a
BitDefender	Trojan.Generic.30327672
NANO-Antivirus	Virus.Win32.Ramnit.eslalb
ViRobot	Win32.Ramnit.E
MicroWorld-eScan	Trojan.Generic.30327672
Tencent	Virus.Win32.Nimnul.d
Ad-Aware	Trojan.Generic.30327672
Sophos	ML/PE-A + W32/Patched-I
Comodo	Packed.Win32.MUPX.Gen@24tbus
BitDefenderTheta	AI:FileInfector.EAEEA7850C
VIPRE	Virus.Win32.Ramnit.a (v)
TrendMicro	PE_RAMNIT.H
McAfee-GW-Edition	BehavesLike.Win32.Ramnit.cc
FireEye	Generic.mg.47c116db3f0e5d53
Emsisoft	Trojan.Generic.30327672 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Win32/PatchFile.et
Avira	W32/Ramnit.CD
Antiy-AVL	Trojan/Generic.ASVirus.1EB
Kingsoft	Win32.Infected.Ramnit.sr.(kcloud)
Microsoft	Virus:Win32/Ramnit.A
Gridinsoft	Malware.Win32.Gen.bot!se59456
Arcabit	Win32.Ramnit
ZoneAlarm	HEUR:Virus.Win32.Ramnit.gen
GData	Win32.Virus.Ramnit.C
TACHYON	Virus/W32.Ramnit.B
AhnLab-V3	Win32/Ramnit.B
Acronis	suspicious
McAfee	W32/Ramnit.q
MAX	malware (ai score=80)
VBA32	Virus.Win32.Nimnul.a
Panda	W32/Cosmu.gen
TrendMicro-HouseCall	PE_RAMNIT.H
Rising	Virus.Ramnit!1.9AA5 (CLASSIC)
Yandex	Win32.Ramnit.Gen.3
Ikarus	Virus.Ramnit
MaxSecure	Virus.Nimnul.A
Fortinet	W32/Ramnit.A
AVG	Win32:RmnDrp [Inf]
Paloalto	generic.ml

How to remove Trojan.Generic.30327672?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Trojan.Generic.30327672”?