Should I remove “Trojan.Generic.31281629”?

The Trojan.Generic.31281629 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.31281629 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Macedonian
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the Vidar malware family
• Attempts to modify proxy settings
• Harvests cookies for information gathering

How to determine Trojan.Generic.31281629?

File Info:
name: EF744B057A70AFA249D3.mlw
path: /opt/CAPEv2/storage/binaries/257e3e14d9da9102f2f0b0acdcc6b715a4c37444a9d8a54590b96dc658d52e89
crc32: 6661C362
md5: ef744b057a70afa249d3f13681b0da47
sha1: e93206e5a48fc4e3d0983a72e68451b2d192aa5f
sha256: 257e3e14d9da9102f2f0b0acdcc6b715a4c37444a9d8a54590b96dc658d52e89
sha512: 48f45222d0026590e671228ac3407ee3b1e1e0b66d0233cdc0ebb2fa6f7a1f694a5221e549dbcf05df506dd50e8f2dd50e22061644c94edc648b35887bc8ecde
ssdeep: 12288:NEbG1dtxNSv5gopAZtdKvQj/BD3clH6aSK+AyKk5DkcbRqT1MIMaK4:6bgBSv5g4EvTj/t3cx6aUAyVVL4BMIMs
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EEE4022172C4C0B3C052227A9851C7B6BB7A78755A36BF8BB7C05F795F243D1EA2430A
sha3_384: 68f019a3e2c7521e9f1827ccc7b624f28ceecc5a34551c6b4bfe78ada0c922ecaeaabf449eb0efc408a1bbd4b571cfdd
ep_bytes: e81d650000e978feffffcccccccccccc
timestamp: 2020-06-14 13:43:18

Version Info:
FileVers: 65.51.36.16
ProductVersa: 7.50.25.71
InternalName: peatemas
LegalCopyrighd: sharnir
Translations: 0x0169 0x0300

Trojan.Generic.31281629 also known as:

How to remove Trojan.Generic.31281629?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.