How to remove “Trojan.Generic.31249387”?

The Trojan.Generic.31249387 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.31249387 virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Generic.31249387?


File Info:
name: 646CACE6EE8BA0413E0F.mlw
path: /opt/CAPEv2/storage/binaries/a6bf02cb1060b6e2390e7510a1f7d448e54afd6aedcdf7ffff907f3e28565175
crc32: 860808D8
md5: 646cace6ee8ba0413e0fab1a2bc82519
sha1: a1e51b621c00059ceab421af60e10e332dd3e58a
sha256: a6bf02cb1060b6e2390e7510a1f7d448e54afd6aedcdf7ffff907f3e28565175
sha512: 9bbccbf59c42714e1515c3d9f5fb1c62c0f715d468c281888f263ebeec712e2cf72510f94c7d572cd605e77ddffb9573618dda3d6972239f162092260fe35b0e
ssdeep: 6144:1e+dLLOvKZvz+Pwr/wrqG4G4G4G4G4G4G4G4G4GI12GI12GI12GI12GI12GI12GF:4+9Lr1iPwr/wrROy0g
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16695D6CCECAB7C0DD61C17BEC8A172815BDA4FB1AD12978AC18EB56631336F318D9611
sha3_384: 3509a9b6c74272cc933ce8ba16a4ddae4f2e8eec023d1b9768bc8cb7914f8ecbbe16ee42abbe9396a7ab09f2cfd79999
ep_bytes: e8a6050000e980feffff558becff7508
timestamp: 2017-09-12 04:15:34

Version Info:
CompanyName: Drifft
FileDescription: Drifft
FileVersion: 11.4.30.21
InternalName: Drifft
LegalCopyright: Drifft
OriginalFilename: Drifft
ProductName: Drifft
ProductVersion: 40.3.76.3
Translation: 0x1c09 0x04b0

Trojan.Generic.31249387 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.InstallMonster.2349
Cynet	Malicious (score: 100)
FireEye	Trojan.Generic.31249387
CAT-QuickHeal	Trojan.MauvaiseRI.S5250994
McAfee	GenericRXCP-LC!646CACE6EE8B
Malwarebytes	Adware.InstallMonster
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Wacatac.B
K7AntiVirus	Trojan-Downloader ( 00516a931 )
Alibaba	Malware:Win32/km_2e96baa1.None
K7GW	Trojan-Downloader ( 00516a931 )
Cybereason	malicious.21c000
Symantec	SMG.Heur!gen
APEX	Malicious
Paloalto	generic.ml
BitDefender	Trojan.Generic.31249387
ViRobot	Trojan.Win32.Z.Installmonster.1974786
MicroWorld-eScan	Trojan.Generic.31249387
Avast	Other:Malware-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b4590e
Ad-Aware	Trojan.Generic.31249387
Emsisoft	Trojan.Generic.31249387 (B)
Comodo	TrojWare.Win32.TrojanDownloader.Tovkater.HT@7ebfmm
Zillya	Downloader.Tovkater.Win32.396
TrendMicro	TROJ_GEN.R002C0OKN21
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.Q80W2H
Jiangmin	TrojanDownloader.Generic.awzg
Arcabit	Trojan.Generic.D1DCD3EB
SUPERAntiSpyware	Adware.InstallMonster/Variant
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	PUP/Win32.HPDefender.R208879
ALYac	Trojan.Generic.31249387
MAX	malware (ai score=81)
TrendMicro-HouseCall	TROJ_GEN.R002C0OKN21
Ikarus	Trojan-Downloader.Win32.Tovkater
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Other:Malware-gen [Trj]
Panda	Trj/CI.A

How to remove Trojan.Generic.31249387?

Trojan.Generic.31249387 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X