Trojan

Should I remove “Trojan.Generic.32163134”?

Malware Removal

The Trojan.Generic.32163134 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.32163134 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Generic.32163134?


File Info:

name: 4AA1E4D8EE207F8DFDFB.mlw
path: /opt/CAPEv2/storage/binaries/fd9f521f9bbed28e3187f44553d57bbc4a23afc1cd155c359f016975a089f778
crc32: FC08F802
md5: 4aa1e4d8ee207f8dfdfb1502bfe8ebc3
sha1: c25356c1339b16e3febbf5705cd4e51e5a6eac2e
sha256: fd9f521f9bbed28e3187f44553d57bbc4a23afc1cd155c359f016975a089f778
sha512: ea6b620ebae4f00c901fe53a5d5e78379525a8cd21a5d49c90a4c4e8702f54d83351f0fb039dd230b3b589a305f3f38b56a1896dd16ce2d9965ede36219d0203
ssdeep: 12288:tS6PnYKc/ojkRNE2XMpGvibLmH9svyjGhyDlq5wiDTj:tdPsojcGQuGvkLg9qmGhlDT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B2D4225F7F9C08EEEA0417B60197777A0E19ED2C47A307A6F9D5BE0E263168C9EC0524
sha3_384: 92cbcd9adfac286181e0d0ec2ec732a64af20cbc5c165e6aa4fe8f63ab10d8aa5912946ef7a480d5811f66f76d7edc96
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 2021-07-05 04:48:59

Version Info:

FileVersion: 1.0.0.0
FileDescription: 易语言程序
ProductName: 易语言程序
ProductVersion: 1.0.0.0
LegalCopyright: 作者版权所有 请尊重并使用正版
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
Translation: 0x0804 0x04b0

Trojan.Generic.32163134 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.32163134
ClamAVWin.Malware.Trojanx-9951053-0
ALYacTrojan.Generic.32163134
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.ins
K7AntiVirusTrojan ( 005246d51 )
AlibabaTrojan:Win32/Injector.7fadd9e6
K7GWTrojan ( 005246d51 )
Cybereasonmalicious.1339b1
BitDefenderThetaGen:NN.ZexaF.36662.Ky0baqnhbzdH
CyrenW32/Trojan.GRW.gen!Eldorado
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
CynetMalicious (score: 100)
BitDefenderTrojan.Generic.32163134
AvastWin32:Malware-gen
EmsisoftApplication.Generic (A)
VIPRETrojan.Generic.32163134
TrendMicroTROJ_GEN.R002C0PG823
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.hc
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.4aa1e4d8ee207f8d
SophosGeneric Reputation PUA (PUA)
SentinelOneStatic AI – Suspicious PE
GDataWin32.Trojan.PSE.4AIOBO
MAXmalware (ai score=84)
Antiy-AVLTrojan/Win32.FlyStudio.a
ArcabitTrojan.Generic.D1EAC53E
ViRobotTrojan.Win.Z.Agent.604672.P
MicrosoftTrojan:Win32/Wacatac.A!ml
GoogleDetected
AhnLab-V3Malware/Win.Generic.C5079327
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002C0PG823
IkarusTrojan.Win32.QQWare
MaxSecureDropper.Dinwod.frindll
FortinetW32/CoinMiner.ELG!tr.pws
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Trojan.Generic.32163134?

Trojan.Generic.32163134 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment