Trojan

What is “Trojan.Generic.31215617”?

Malware Removal

The Trojan.Generic.31215617 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.31215617 virus can do?

  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Attempts to modify proxy settings

How to determine Trojan.Generic.31215617?


File Info:

name: FC558F37191A8CEE117F.mlw
path: /opt/CAPEv2/storage/binaries/54338b95992af3dadeb4719731627a51aad92fc95139a94b22d8a5eb78793e8f
crc32: CFEAA855
md5: fc558f37191a8cee117f211dec372d83
sha1: 0cfd39634939c15a9f4144ea9558b69c108232e9
sha256: 54338b95992af3dadeb4719731627a51aad92fc95139a94b22d8a5eb78793e8f
sha512: accf42344b7f6581ed395256094803b9b4547d69d9fe2011d9f771840c700881c1cf671c0fa96995690b257aa860c78d892422a07cd15dee014109a05c6ff2cf
ssdeep: 1536:W04f1SMHjZ0k/tB1g//I0DuoxbxAHscblAGqU3iBY8S5xXZTa8rq5yT:of1BDZ0kVB67Duw9AMcblANLzS5xJ0yT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T110648DB1A61098B3CAAB07700976792C87EA5DC9B1651607730A78F36F733E3352E953
sha3_384: 5def444051571661e25f1687ccb8ed78223f1f46b46a435ff2398a4b64a7aefeb9aaca8e5fabf147c65826970bef72a9
ep_bytes: 81ec8401000053565733db6801800000
timestamp: 2020-08-01 02:44:50

Version Info:

FileVersion: 1.7.27.974
ProductVersion: 1.7.11.437
Translation: 0x0409 0x04e4

Trojan.Generic.31215617 also known as:

MicroWorld-eScanTrojan.Generic.31215617
FireEyeTrojan.Generic.31215617
McAfeeArtemis!FC558F37191A
CylanceUnsafe
ZillyaDownloader.Adload.Win32.112037
K7AntiVirusTrojan-Downloader ( 0058ab1f1 )
AlibabaAdWare:Win32/AdLoad.65308627
K7GWTrojan-Downloader ( 0058ab1f1 )
CyrenW32/Adload.GF.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32NSIS/TrojanDownloader.Agent.NZR
TrendMicro-HouseCallTROJ_GEN.R002C0WKN21
KasperskyHEUR:Trojan-Downloader.Win32.Adload.gen
BitDefenderTrojan.Generic.31215617
AvastNSIS:DropperX-gen [Drp]
TencentNsis.Trojan-downloader.Agent.Eeqv
Ad-AwareTrojan.Generic.31215617
EmsisoftTrojan.Generic.31215617 (B)
DrWebAdware.Downware.20015
TrendMicroTROJ_GEN.R002C0WKN21
McAfee-GW-EditionBehavesLike.Win32.BadFile.fz
SophosMal/Generic-S
APEXMalicious
GDataTrojan.Generic.31215617
AviraTR/Downloader.ikzcg
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 99)
AhnLab-V3Dropper/Win.DropperX-gen.C4785887
VBA32suspected of Trojan.Downloader.gen
ALYacTrojan.Generic.31215617
FortinetW32/Agent.NZR!tr.dldr
AVGNSIS:DropperX-gen [Drp]
PandaTrj/CI.A

How to remove Trojan.Generic.31215617?

Trojan.Generic.31215617 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment