Trojan

Trojan.Generic.31346242 removal guide

Malware Removal

The Trojan.Generic.31346242 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.31346242 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Trojan.Generic.31346242?


File Info:

name: E90C075E859C8B61F8F5.mlw
path: /opt/CAPEv2/storage/binaries/e603698995029a25ff9e71f78b5447ccb664b995d728025d2dfebc0afc9f1a56
crc32: B0BD7CE8
md5: e90c075e859c8b61f8f5f61cd4929bc5
sha1: a133c91b5f127e850f77f3a2a15dc02c079a7f98
sha256: e603698995029a25ff9e71f78b5447ccb664b995d728025d2dfebc0afc9f1a56
sha512: 0caf7b74410b4cf47507135b777be0f54743b98c7e8e5228cebcd4a29b8e7345dbe6636a8150d379272c0fe7aff89d42b40a2098ed61b5a0fdb6cf713a9feb10
ssdeep: 6144:GFVA9qlW/L94/+wcdXVwlzFByOYd6vYP8GXzd:GiqlQ9hwtlB4Yv8bzd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB4423D934C8C3A2E5B50A302EA2B0C8533A8B559D54D60C68CCE8657DEFB1947D3BF6
sha3_384: 0c64437a7b3df26d935347cd64c396026c6ff109385d83e77c5d78531d0832a5d091fb05c1ad4698184e4be4aa9551f1
ep_bytes: ff250020400000000000000000000000
timestamp: 2039-04-30 14:59:33

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName: *
FileDescription: Чит Sensum
FileVersion: 1.0.0.0
InternalName: Sensum.exe
LegalCopyright: Copyright © * 2021
LegalTrademarks:
OriginalFilename: Sensum.exe
ProductName: Чит Sensum
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan.Generic.31346242 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.31346242
McAfeeRDN/Generic.dx
CylanceUnsafe
SangforTrojan.Win32.Wacatac.B
K7AntiVirusUnwanted-Program ( 004dda711 )
K7GWUnwanted-Program ( 004dda711 )
Cybereasonmalicious.b5f127
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/DllInject.OL potentially unsafe
Paloaltogeneric.ml
BitDefenderTrojan.Generic.31346242
AvastWin32:MiscX-gen [PUP]
EmsisoftTrojan.Generic.31346242 (B)
McAfee-GW-EditionRDN/Generic.dx
SophosMal/Generic-R + Mal/MSIL-AX
SentinelOneStatic AI – Suspicious PE
GDataTrojan.Generic.31346242
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftProgram:Win32/Uwamson.A!ml
AhnLab-V3Trojan/Win.Generic.C4758843
MAXmalware (ai score=88)
MalwarebytesMachineLearning/Anomalous.97%
TrendMicro-HouseCallTROJ_GEN.R002H0CKG21
RisingTrojan.Generic/MSIL@AI.94 (RDM.MSIL:cmDJxA8yG4CxGU9gQSl2Yg)
FortinetAdware/DllInject
AVGWin32:MiscX-gen [PUP]

How to remove Trojan.Generic.31346242?

Trojan.Generic.31346242 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment