Trojan

What is “Trojan.Generic.31211772”?

Malware Removal

The Trojan.Generic.31211772 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.31211772 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Generic.31211772?


File Info:

name: AB55933B8AE134D3330B.mlw
path: /opt/CAPEv2/storage/binaries/8931ceb76c8db5a8d237ea165faf9752f3e7f32d0ad8c1176d1ac92c51a99a09
crc32: 411F4BAD
md5: ab55933b8ae134d3330b0f58bde2fb35
sha1: 357bc54b14a3f7cb297e75c9001ca0d8964d31ff
sha256: 8931ceb76c8db5a8d237ea165faf9752f3e7f32d0ad8c1176d1ac92c51a99a09
sha512: 2188e52f39180f80aa0a53aa5a2e6c8d93d30f297c41bef8d23b5bdb32c1d0e77063b27ac41fdef0e658fe7f5e31395adaa93b3b14260633412e2f3925a5e2d8
ssdeep: 24576:Z0sYgWUEa/Je+Zr4KBsXtTFna2xGQWBfbu:usGUtJeoU44TFn7GZFu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C6257D137595802EE6B24930CDAF1EB4D6A57C374A32445A3684FE1C6DF05A2F923F2E
sha3_384: d480154e0e65e4888544982b88d6afc7b1302924d7ffd6bcd935fea4bd0fcdeb370198406746c9dae0ebec1149e2ef95
ep_bytes: 558bec6aff68f87e4700686072450064
timestamp: 2009-09-22 04:59:30

Version Info:

CompanyName: UGS
FileDescription: Setup Launcher Unicode
FileVersion: 7.5.0.32
InternalName: Setup
LegalCopyright: Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.
OriginalFilename: Setup.exe
ProductName: UGS NX 7.5
ProductVersion: 7.5.0.32
Internal Build Number: 92881
Translation: 0x0409 0x04b0

Trojan.Generic.31211772 also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.Generic.31211772
FireEyeGeneric.mg.ab55933b8ae134d3
McAfeeArtemis!AB55933B8AE1
CylanceUnsafe
SangforTrojan.Win32.Wacatac.B
Cybereasonmalicious.b14a3f
VirITWin32.Sality.BI
APEXMalicious
Paloaltogeneric.ml
BitDefenderTrojan.Generic.31211772
AvastWin32:Sality [Inf]
Ad-AwareTrojan.Generic.31211772
EmsisoftTrojan.Generic.31211772 (B)
McAfee-GW-EditionBehavesLike.Win32.Virus.dh
SophosML/PE-A
SentinelOneStatic AI – Malicious PE
GDataTrojan.Generic.31211772
MAXmalware (ai score=84)
MicrosoftTrojan:Win32/Wacatac.B!ml
Acronissuspicious
ALYacTrojan.Generic.31211772
MalwarebytesMalware.AI.4161903689
TrendMicro-HouseCallTROJ_GEN.R002H0CF522
RisingVirus.Sality/Debris!1.A12C (CLASSIC)
MaxSecureTrojan.Malware.145494172.susgen
FortinetW32/PossibleThreat
AVGWin32:Sality [Inf]

How to remove Trojan.Generic.31211772?

Trojan.Generic.31211772 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment