Should I remove “Trojan.Generic.31248882”?

The Trojan.Generic.31248882 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.31248882 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Macedonian
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the Zeppelin malware family
• Anomalous binary characteristics

How to determine Trojan.Generic.31248882?

File Info:
name: 21758A8FB4F1E8CB4FF3.mlw
path: /opt/CAPEv2/storage/binaries/6bad378323e77851269aa7c5dd537f2c78e634175236b42f4ca8f437cb95fd12
crc32: 8AF1BF3A
md5: 21758a8fb4f1e8cb4ff380d728274339
sha1: 6a8ebe98091f5b5b579a15dfbeeb721504492842
sha256: 6bad378323e77851269aa7c5dd537f2c78e634175236b42f4ca8f437cb95fd12
sha512: 332f4291894080cf3e5aa9962ec294a5a46dca403b1cf7c926359fc1d809e935497dbc78dde474796d45204a7e50d4039bfbaa0c47025e758378fd2f8b7eead3
ssdeep: 12288:kp7BlG4xOHV+2u0lUzFaIxc+uaWnlPKedZI8jXWZRtl:ibG4xOsBzFaIxJWnlyedvezl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12BD4F11232C1C036C0F625768526D6F64EBB783906665A8F7FC85BB95F783D0AB2530E
sha3_384: ff3b335ea8541864024b31f16d5d2c896c8a56cce0d13f7b03f057f06dafbf61239f32ee1ff75ee10238f35b6eea9980
ep_bytes: e845680000e978feffffcccccccccccc
timestamp: 2020-08-13 13:58:34

Version Info:
FileVers: 65.51.36.16
ProductVersa: 7.50.25.71
InternalName: peatemas
LegalCopyrighd: sharnir
Translations: 0x0169 0x0300

Trojan.Generic.31248882 also known as:

How to remove Trojan.Generic.31248882?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.