Trojan

Trojan.Generic.30685287 removal

Malware Removal

The Trojan.Generic.30685287 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.30685287 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan.Generic.30685287?


File Info:

crc32: D89206B2
md5: 2a0bc661cc92f3a27823e125a7e0f952
name: 2A0BC661CC92F3A27823E125A7E0F952.mlw
sha1: e5741d5c3e6449a2322d05abb8372683d0f8bcec
sha256: 5fd17ee93a0e7295854f39208ebd6b898b4789289cdcdc24809b5b1b8884cebc
sha512: 5cd7485e823d9c4a12377eeb9da62423bbfc3633b5a9e4df1f3d83d138a39a09cfe1d0d4bb9862472fc60e5fd32afb0fd8bc65f4f32b195547d86a30823db9d0
ssdeep: 12288:5UjNo8IdaO3SW4PPIIPTh5wCOfXwuxiQJq8S6oT1rLBR2/qP:5wQR3R4XI2Th5wCiXwklo1T5Le/q
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: sedsvc
FileVersion: 10.0.17134.10081 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17134.10081
FileDescription: sedsvc
OriginalFilename: sedsvc
Translation: 0x0409 0x04b0

Trojan.Generic.30685287 also known as:

K7AntiVirusVirus ( 00535e4a1 )
Elasticmalicious (high confidence)
DrWebWin64.Expiro.132
CynetMalicious (score: 100)
ALYacTrojan.Generic.30685287
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (D)
K7GWVirus ( 00535e4a1 )
Cybereasonmalicious.1cc92f
CyrenW64/Expiro.AH.gen!Eldorado
ESET-NOD32a variant of Win64/Expiro.CO
APEXMalicious
AvastWin64:Evo-gen [Susp]
KasperskyHEUR:Virus.Win64.Expiro.gen
BitDefenderTrojan.Generic.30685287
MicroWorld-eScanTrojan.Generic.30685287
Ad-AwareTrojan.Generic.30685287
SophosML/PE-A + W64/Expiro-AX
TrendMicroVirus.Win64.EXPIRO.MR
FireEyeGeneric.mg.2a0bc661cc92f3a2
EmsisoftTrojan.Generic.30685287 (B)
JiangminTrojan.Bingoml.akq
AviraTR/Patched.Gen
Antiy-AVLTrojan/Generic.ASVirus.30B
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Generic.D1D43867
GDataTrojan.Generic.30685287
MAXmalware (ai score=89)
MalwarebytesMalware.AI.4212388376
TrendMicro-HouseCallVirus.Win64.EXPIRO.MR
MaxSecurevirus.win64.expiro.gen
FortinetW64/Expiro.BS
AVGWin64:Evo-gen [Susp]

How to remove Trojan.Generic.30685287?

Trojan.Generic.30685287 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment