Categories: Trojan

Trojan.Generic.31207452 removal guide

The Trojan.Generic.31207452 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.31207452 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Trojan.Generic.31207452?


File Info:
name: A3454AE3FD7480D2B3FE.mlwpath: /opt/CAPEv2/storage/binaries/95cf146d37308fffceba05a44dd26443d14ef2142c0e57cc771928ad6ee53b1ecrc32: 6FCD7203md5: a3454ae3fd7480d2b3fec5ebfa8196a6sha1: ede1492f8e8c1fdcd69882a047637e36dd854f53sha256: 95cf146d37308fffceba05a44dd26443d14ef2142c0e57cc771928ad6ee53b1esha512: b91d7d9ee73adf837809f761cd40fea91c99495d87a2f9afff0e1ac13de410d138e6c3ce7f0df4527eb4d63adfbd399866a18eccf797ac2a34977f9ac645fbb4ssdeep: 24576:S4o4P1TqLKobpZlmc0TAWxOT81uERgD4Joo1vDrvwssfPT2HiPak:fo4hqL9wTAWxO0uIgD2oq7rvx67ciRtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A98538DD6C04D033CD6203F149795E95693CA92C07D447C3BBB8A719B9E04D2EB3EA9Asha3_384: 8ec790b572399d3c5030d30df43c9ac20e9726aacabd09fe9ec7cd340e40e949e9b2f43fff04f4524a6db14d9b6530ffep_bytes: e871060000e98efeffff558becff7508timestamp: 2021-04-19 07:09:33
Version Info:
CompanyName: 上海展盟网络科技有限公司FileDescription: feedback.exeFileVersion: 3.3.0.2InternalName: feedback.exeLegalCopyright: Copyright © 2019 上海展盟网络科技有限公司 All Rights ReservedOriginalFilename: feedback.exeProductName: feedback.exeProductVersion: 3.3.0.2Translation: 0x0804 0x04b0

Trojan.Generic.31207452 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.KuziTui.2!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Generic.31207452
FireEye	Generic.mg.a3454ae3fd7480d2
McAfee	KuaiZip
Cylance	Unsafe
Zillya	Adware.KuziTui.Win32.1610
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 00565ab71 )
Alibaba	AdWare:Win32/KuaiZip.3f49fba4
K7GW	Adware ( 00565ab71 )
Cybereason	malicious.f8e8c1
Arcabit	Trojan.Generic.D1DC301C
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/KuaiZip.AB potentially unwanted
APEX	Malicious
Paloalto	generic.ml
Kaspersky	not-a-virus:HEUR:AdWare.Win32.KuziTui.gen
BitDefender	Trojan.Generic.31207452
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Avast	Win32:Sality [Inf]
Rising	Adware.Agent!1.C6CF (CLASSIC)
Ad-Aware	Trojan.Generic.31207452
Sophos	Generic PUA ON (PUA)
VIPRE	Virus.Win32.Sality.atbh (v)
TrendMicro	PE_SALITY.ER
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
Emsisoft	Trojan.Generic.31207452 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.KuziTui.aad
eGambit	Unsafe.AI_Score_89%
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.34BFC5C
Microsoft	Trojan:Win32/Wacatac.A!ml
ViRobot	Adware.Kuaizip.1817992.Q
GData	Trojan.Generic.31207452
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34294.UD2@aeEftCpj
ALYac	Trojan.Generic.31207452
MAX	malware (ai score=85)
VBA32	BScope.Adware.Burden
Malwarebytes	PUP.Optional.Kuaizip
TrendMicro-HouseCall	PE_SALITY.ER
Tencent	Pua:Adware.Win32.Kuzitui.16000040
MaxSecure	Adware.notavirus.WIN32.AdWare.KuziTui.gen_220499
Fortinet	Adware/KuaiZip.AB
AVG	Win32:Sality [Inf]