Trojan

Should I remove “Trojan.Generic.31355818”?

Malware Removal

The Trojan.Generic.31355818 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Generic.31355818 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Expresses interest in specific running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Queries information on disks, possibly for anti-virtualization
  • Collects information about installed applications

How to determine Trojan.Generic.31355818?



File Info:

name: CA04EA819FBAB2CDAC64.mlw
path: /opt/CAPEv2/storage/binaries/543e80d45c1ec1d23731c20bb7110b98609c0ca36dcd212a8aeb76cb64c94578
crc32: 1F945A03
md5: ca04ea819fbab2cdac64bcbb705a9dcb
sha1: a911f79201ebe17f131f600a85d545b1106bbd31
sha256: 543e80d45c1ec1d23731c20bb7110b98609c0ca36dcd212a8aeb76cb64c94578
sha512: 57107f6c119658a211910a64ecc8af79fa850a120d8e90a4464ec93708a542ce7365fd6168f58a87330a9e5c58db7543de457321bfbaaa88843edfb5e1eda8bf
ssdeep: 49152:W5IxYgTTp5FaWz9SwKfXb9uO9YPIf7n+W2aOMq/47NrvOPPycVGB9QTQ8dV:W5IxYgTTtaWhSRXJuOiPITD2aj7Nrvgx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T193B56A13B6618D62F4CE21339F66037B4CB55D23C31F8ADB97C1B9A548601F16E3AE86
sha3_384: 6852c60038db465b7e674168dcbd5114553ae5620f0a2b46acec2ef5fe3e3ca891e25913d23c5011c40ab35c5dc77712
ep_bytes: e84b060000e98efeffff558bec56ff75
timestamp: 2021-06-18 02:44:31


Version Info:

CompanyName: 北京布丁跳跳科技有限公司
FileDescription: 快阅看图王
InternalName: 快阅看图王
LegalCopyright: Copyright (C) 2020
OriginalFilename: KyPicECT.exe
ProductName: 快阅看图王
ProductVersion: 1,0,5,21618
Translation: 0x0804 0x04b0

Trojan.Generic.31355818 also known as:

BkavW32.AIDetect.malware1
LionicAdware.Win32.Burden.2!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.31355818
FireEyeGeneric.mg.ca04ea819fbab2cd
CAT-QuickHealPUA.SoftcnappRI.S24877552
ALYacTrojan.Generic.31355818
MalwarebytesPUP.Optional.Softcnapp
ZillyaAdware.Burden.Win32.6481
SangforTrojan.Win32.Save.a
K7AntiVirusAdware ( 00571de41 )
BitDefenderTrojan.Generic.31355818
K7GWAdware ( 00571de41 )
Cybereasonmalicious.201ebe
ArcabitTrojan.Generic.D1DE73AA
BitDefenderThetaGen:NN.ZexaF.34114.lE2@aymo6Qlj
VirITWin32.Sality.BI
CyrenW32/Sality.AY.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Softcnapp.BH potentially unwanted
TrendMicro-HouseCallPE_SALITY.ER
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:AdWare.Win32.Burden.gen
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
AvastWin32:Sality [Inf]
TencentPua:Adware.Win32.Burden.16000021
Ad-AwareTrojan.Generic.31355818
EmsisoftTrojan.Generic.31355818 (B)
VIPREVirus.Win32.Sality.atbh (v)
TrendMicroPE_SALITY.ER
McAfee-GW-EditionBehavesLike.Win32.Generic.vh
SophosGeneric PUA KJ (PUA)
IkarusPUA.Softcnapp
JiangminAdWare.Burden.cyp
AviraTR/Patched.Ren.Gen
Antiy-AVLTrojan/Generic.ASMalwS.34D5214
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftProgram:Win32/Wacapew.C!ml
GDataTrojan.Generic.31355818
CynetMalicious (score: 100)
Acronissuspicious
MAXmalware (ai score=88)
VBA32BScope.Adware.Burden
CylanceUnsafe
APEXMalicious
RisingAdware.Agent!1.C1A1 (CLOUD)
SentinelOneStatic AI – Malicious PE
MaxSecureAdware.notavirus.WIN32.AdWare.Burden.gen_211742
FortinetAdware/Softcnapp.BF
AVGWin32:Sality [Inf]

How to remove Trojan.Generic.31355818?

Trojan.Generic.31355818 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment