Trojan

Trojan.Generic.31207348 removal tips

Malware Removal

The Trojan.Generic.31207348 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.31207348 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

How to determine Trojan.Generic.31207348?


File Info:

crc32: CA3B2399
md5: 891ab229fa313a150189ce236964785c
name: 891AB229FA313A150189CE236964785C.mlw
sha1: 1788f7ad85fc98f958b2fdfd26bd8f8b5d3e78cc
sha256: 515db7df35e88a3a1c6167bfed1b634fc8fb48063c5290195607472e45607672
sha512: 1dc1ffa405fe2aa03ec2959d601d9aede9c4c24bd5f45ebf712fa0ccde36beffa6bc25c466deac62c62cef0cdb348152aff7e35abef631ec3a968bffbaa3bf1e
ssdeep: 49152:Ro4hqL9wTAWxO0uIgD2oq7rXx67ciQPB7a:RIL9wTA50K2oI6W7a
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2019 x4e0ax6d77x5c55x76dfx7f51x7edcx79d1x6280x6709x9650x516cx53f8 All Rights Reserved
InternalName: readmode.exe
FileVersion: 3.3.0.2
CompanyName: x4e0ax6d77x5c55x76dfx7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: readmode.exe
ProductVersion: 3.3.0.2
FileDescription: readmode.exe
OriginalFilename: readmode.exe
Translation: 0x0804 0x04b0

Trojan.Generic.31207348 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusAdware ( 00565ab71 )
LionicAdware.Win32.KuziTui.2!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.Ludicrouz
McAfeeKuaiZip
CylanceUnsafe
ZillyaAdware.KuziTui.Win32.1610
SangforTrojan.Win32.Save.a
AlibabaAdWare:Win32/KuaiZip.c517d2f3
K7GWAdware ( 00565ab71 )
Cybereasonmalicious.d85fc9
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/KuaiZip.AB potentially unwanted
APEXMalicious
AvastWin32:Sality [Inf]
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:AdWare.Win32.KuziTui.gen
BitDefenderTrojan.Generic.31207348
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
MicroWorld-eScanTrojan.Generic.31207348
TencentPua:Adware.Win32.Kuzitui.16000040
Ad-AwareTrojan.Generic.31207348
SophosGeneric PUA BH (PUA)
VIPREVirus.Win32.Sality.atbh (v)
TrendMicroPE_SALITY.ER
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
EmsisoftTrojan.Generic.31207348 (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.KuziTui.aad
AviraTR/Patched.Ren.Gen
eGambitUnsafe.AI_Score_91%
Antiy-AVLTrojan/Generic.ASMalwS.34BFC5C
KingsoftWin32.Heur.KVMH008.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitTrojan.Generic.D1DC2FB4
GDataTrojan.Generic.31207348
Acronissuspicious
VBA32BScope.Adware.Burden
MAXmalware (ai score=87)
MalwarebytesPUP.Optional.Kuaizip
TrendMicro-HouseCallPE_SALITY.ER
RisingAdware.Agent!1.C6CF (CLASSIC)
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/KuaiZip.AB
AVGWin32:Sality [Inf]
Paloaltogeneric.ml

How to remove Trojan.Generic.31207348?

Trojan.Generic.31207348 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment