Trojan

Trojan.Generic.31496820 removal

Malware Removal

The Trojan.Generic.31496820 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.31496820 virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Generic.31496820?


File Info:

name: 3A717372E1671782407D.mlw
path: /opt/CAPEv2/storage/binaries/634f07d65cb18e8754325387c3aa6f1ea56b7f686bfabdbe0e76c0c554eda6ac
crc32: C9444198
md5: 3a717372e1671782407db50e426d3761
sha1: f03b5b22ad658071bc8c5aa48ed9dafe8118539c
sha256: 634f07d65cb18e8754325387c3aa6f1ea56b7f686bfabdbe0e76c0c554eda6ac
sha512: 2f88187d442e47530aff6580811c743e625e9679cf1e4d9bb65ca7096b2c3656dc4550f0613e058c33a983b706c6d62d053a5276f152760bc0d0f72bb4eceafc
ssdeep: 24576:oQC7HmUDDPC803QpIY46xNIxuzP2e+2RJXlhO1DrA/1EZ8J/6Q4xUEisz2T:oQCXDPCT3QCYroEb2e+2RJO1Ds/1ESJ3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FC6533710A405817E0F210B8EF63DE0F1F75E9A569022A07F6E8509C9ADE27DFD51B2D
sha3_384: 6eaf52d5061718493e8ae6265022a91776700c555216a97a42b8008062135518c2cd4b1b99fe287dd0042f61508b76e3
ep_bytes: e926faffff8b442404eb1780f93b750c
timestamp: 2005-02-24 19:44:38

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Update Package
FileVersion: 1
InternalName: SFXCAB.EXE
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: SFXCAB.EXE
ProductName: Windows Server 2003 Family
ProductVersion: 6.1.0022.4
Build Date: 2005/05/02
Applies to: Windows Server 2003 Service Pack 1
Installation Type: Full
Installer Version: 6.1.22.4
Installer Engine: update.exe
KB Article Number: 898715
Support Link: http://support.microsoft.com?kbid=898715
Package Type: Update
Proc. Architecture: x86
Self-Extractor Version: SFXCAB v6.1.22.4
Translation: 0x0409 0x04b0

Trojan.Generic.31496820 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.Generic.31496820
FireEyeTrojan.Generic.31496820
CAT-QuickHealTrojan.Agent
SkyhighArtemis!Virus
McAfeeArtemis!3A717372E167
SangforTrojan.Win32.Agent.Vah4
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002H09I423
BitDefenderTrojan.Generic.31496820
AvastWin32:Sality [Inf]
VIPRETrojan.Generic.31496820
Trapminesuspicious.low.ml.score
EmsisoftTrojan.Generic.31496820 (B)
IkarusTrojan.Patched
GoogleDetected
KingsoftWin32.Troj.Undef.a
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D1E09A74
GDataWin32.Virus.Patched.L@susp
CynetMalicious (score: 100)
ALYacTrojan.Generic.31496820
MAXmalware (ai score=81)
Cylanceunsafe
MaxSecureTrojan.Malware.121218.susgen
AVGWin32:Sality [Inf]
Cybereasonmalicious.2e1671
DeepInstinctMALICIOUS
alibabacloudVirTool:Win/SignThief.A(dyn)

How to remove Trojan.Generic.31496820?

Trojan.Generic.31496820 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment