Trojan

How to remove “Trojan.Generic.31215617 (B)”?

Malware Removal

The Trojan.Generic.31215617 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.31215617 (B) virus can do?

  • Dynamic (imported) function loading detected
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Attempts to modify proxy settings

How to determine Trojan.Generic.31215617 (B)?


File Info:

name: 20F6BC4F489BD94C7C59.mlw
path: /opt/CAPEv2/storage/binaries/7d221f2d562d48a67bbca46f07b30d1509df3a8021f1e0a31ec1f8eb3c0da943
crc32: CFEAA855
md5: 20f6bc4f489bd94c7c59fcaa78fe747b
sha1: c49624632a51a490f1dd2851f9616e6501b48850
sha256: 7d221f2d562d48a67bbca46f07b30d1509df3a8021f1e0a31ec1f8eb3c0da943
sha512: 95abeafb94f37476c662a4ee417fce955fb3e46ba6ecc4e539e2c22f029a3b0bb3be26d34432c14d2d2fa6705229aa83aff002f54d61030cb33782f58d3c5f5a
ssdeep: 3072:of1BDZ0kVB67Duw9AMcFQhTDg7xLOQmJW5OxJ0yE:o9X0G6lD4LOQSW5KE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14B649D6A66709C9BE4290D3E186F12239F997A15E14D87DB33506EE4FF6B2932D0F021
sha3_384: 2ae08a7999c1e497fb7ad5d62b6d81296e4eec8bb17917780cd0d1e9e5ceadb4965be943c9b1fa0118c6fc8eb886b512
ep_bytes: 81ec8401000053565733db6801800000
timestamp: 2020-08-01 02:44:50

Version Info:

FileVersion: 2.2.43.254
ProductVersion: 2.2.64.551
Translation: 0x0409 0x04e4

Trojan.Generic.31215617 (B) also known as:

DrWebAdware.Downware.20015
MicroWorld-eScanTrojan.Generic.31215617
FireEyeTrojan.Generic.31215617
ALYacTrojan.Generic.31215617
CylanceUnsafe
ZillyaDownloader.Adload.Win32.4
K7AntiVirusTrojan-Downloader ( 0058ab511 )
AlibabaAdWare:Win32/AdLoad.bdc20dee
K7GWTrojan-Downloader ( 0058ab511 )
CyrenW32/Adload.GF.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32NSIS/TrojanDownloader.Agent.NZR
TrendMicro-HouseCallTROJ_GEN.R002C0WKN21
KasperskyHEUR:Trojan-Downloader.Win32.Adload.gen
BitDefenderTrojan.Generic.31215617
AvastNSIS:DropperX-gen [Drp]
Ad-AwareTrojan.Generic.31215617
EmsisoftTrojan.Generic.31215617 (B)
TrendMicroTROJ_GEN.R002C0WKN21
McAfee-GW-EditionRDN/Generic Downloader.x
AviraTR/Dldr.Agent.nwirz
MAXmalware (ai score=80)
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ViRobotTrojan.Win32.Z.Agent.325424.D
GDataTrojan.Generic.31215617
CynetMalicious (score: 99)
AhnLab-V3Dropper/Win.DropperX-gen.C4785887
McAfeeRDN/Generic Downloader.x
VBA32suspected of Trojan.Downloader.gen
APEXMalicious
TencentNsis.Trojan-downloader.Agent.Hrpe
FortinetW32/Agent.NZR!tr.dldr
AVGNSIS:DropperX-gen [Drp]
PandaTrj/CI.A

How to remove Trojan.Generic.31215617 (B)?

Trojan.Generic.31215617 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment