Categories: Trojan

How to remove “Trojan.Generic.31289592”?

The Trojan.Generic.31289592 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.31289592 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Starts servers listening on 127.0.0.1:43958
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Generic.31289592?


File Info:
name: 50574CE8D4B5DBF27F9E.mlwpath: /opt/CAPEv2/storage/binaries/cd4fdc6d1cc85621ccc691f43a7ec248c6d854fdbba3ea6920d06a35231b9c8dcrc32: A6DB6AE7md5: 50574ce8d4b5dbf27f9e775e2f0479bfsha1: b23f0e3655b359458c8dbfb24a5091d586b9187csha256: cd4fdc6d1cc85621ccc691f43a7ec248c6d854fdbba3ea6920d06a35231b9c8dsha512: 8589d781c8b6367b658cb80459aee226f2377527c514d4705bb31590d8c4311bfc51afc8d07b17ab79856a9d40034a500103a3a8ac2810eb6f2fa5bf73524860ssdeep: 12288:sZmXMBoD1rgfp3hdZ15DnDbHCiLKNdpEc5PGHhu05yyQr:swXyoD6p3hdZHDDdLKWcwBQrtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E1A423FB199A05ACC1970AB4B76D41286B0D9B36F04E772B8757372AC4DF924FAB1018sha3_384: 659cf046cc179ae38a667eb37658575c1700f05ff62e1e322bfcb1fc3f154db8ed86f12d18718c05e027d8678173a443ep_bytes: 60e803000000e9eb045d4555c3e80100timestamp: 2001-05-29 14:03:50
Version Info:
0: [No Data]

Trojan.Generic.31289592 also known as:

MicroWorld-eScan	Trojan.Generic.31289592
FireEye	Trojan.Generic.31289592
ALYac	Trojan.Generic.31289592
Cylance	Unsafe
Zillya	Backdoor.PePatch.Win32.35987
Sangfor	Hacktool.Win32.Serv-U.3017
K7AntiVirus	Trojan ( 00002ea51 )
K7GW	Trojan ( 00002ea51 )
Cyren	W32/Tool.SYXN-8111
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ServU-Daemon potentially unsafe
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Servu-22
Kaspersky	not-a-virus:Server-FTP.Win32.Serv-U.3017
BitDefender	Trojan.Generic.31289592
NANO-Antivirus	Trojan.Win32.Servu.fiixgq
Avast	Win32:Malware-gen
Ad-Aware	Trojan.Generic.31289592
Sophos	Troj/Servu-AB
Comodo	ApplicUnsaf.Win32.ServU-Daemon.~S3@hxgv3
DrWeb	BackDoor.Servu.30
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R03BC0PLL21
Emsisoft	Trojan.Generic.31289592 (B)
Ikarus	Backdoor.IRC.Cloner
GData	Trojan.Generic.31289592
Jiangmin	Backdoor/ServU-based.b
Webroot	W32.Trojan.Gen
Avira	TR/HK.3
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Generic.ASMalwS.201B3
Gridinsoft	Ransom.Win32.Wacatac.sa
ViRobot	Backdoor.Win32.ServU.490496
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Unwanted/Win32.Serv.R75571
McAfee	ServU-Daemon.aj
VBA32	Backdoor.ServUbased
TrendMicro-HouseCall	TROJ_GEN.R03BC0PLL21
Rising	Backdoor.Win32.Servudoor.d (CLASSIC)
Yandex	Trojan.GenAsa!6d6eR6DNI5E
eGambit	Unsafe.AI_Score_50%
Fortinet	W32/ServUBased.A!tr.bdr
BitDefenderTheta	Gen:NN.ZexaF.34114.DOWbaynkm7ei
AVG	Win32:Malware-gen
Panda	Bck/ServU.BY
MaxSecure	Trojan.Malware.300983.susgen