Trojan

Trojan.Generic.32177735 removal tips

Malware Removal

The Trojan.Generic.32177735 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.32177735 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Generic.32177735?


File Info:

name: 64651EC0A85746296BC5.mlw
path: /opt/CAPEv2/storage/binaries/b191a27b8aae1d6cfbdf642a95879cd71cbd9069d9ff27d6135d1bec6c80eea5
crc32: 4A5B547C
md5: 64651ec0a85746296bc5dc07096be0c5
sha1: d8ac4a32e4169ddca9635712aa37fdb0116ac107
sha256: b191a27b8aae1d6cfbdf642a95879cd71cbd9069d9ff27d6135d1bec6c80eea5
sha512: 8be1a14abda8c42b3b468dd68b17325aac3b78c6e8c0b76a0ca6588343a693c59a6c2f5541bd44587b65cbf9d031d60c8ef28d06bd75ed944f904d5cc5617d27
ssdeep: 12288:59/xgNr86CLTNqMRCUYxTzKuBhX3CEXyOrjVh74sUgXtKZhWN/:5N23nMsxnLf39rf4ctw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F2D422A5B347693DF00076B30B53C96546BC7F34B8088E5EF5B6666A64AD12CCDF122C
sha3_384: a24c892ccf48102ac40987486ec9129e45d455c774a68bccba66c732ba27052c165ba169e4d971814d133b58ab83a26c
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 2021-11-15 09:41:42

Version Info:

FileVersion: 1.0.0.0
FileDescription: 印优软件卸载
ProductName: 印优软件卸载
ProductVersion: 1.0.0.0
CompanyName: 贵州印优软件有限公司
LegalCopyright: 版权所有@贵州印优软件有限公司
Comments: 本程序使用易语言编写(http://www.dywt.com.cn)
Translation: 0x0804 0x04b0

Trojan.Generic.32177735 also known as:

CyrenCloudRisk/WIN_PE.b191a27b!Threatlookup
BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Generic.32177735
FireEyeGeneric.mg.64651ec0a8574629
SkyhighBehavesLike.Win32.Generic.jc
ALYacTrojan.Generic.32177735
Cylanceunsafe
SangforSuspicious.Win32.Save.ins
K7AntiVirusPassword-Stealer ( 004b08171 )
AlibabaTrojan:Win32/Generic.aaef3323
K7GWPassword-Stealer ( 004b08171 )
Cybereasonmalicious.2e4169
ArcabitTrojan.Generic.D1EAFE47
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
CynetMalicious (score: 100)
APEXMalicious
BitDefenderTrojan.Generic.32177735
AvastWin32:Malware-gen
Ad-AwareTrojan.Generic.32177735
EmsisoftTrojan.Generic.32177735 (B)
VIPRETrojan.Generic.32177735
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan.Win32.MBRlock
MAXmalware (ai score=85)
Antiy-AVLTrojan/Win32.Wacatac
Kingsoftmalware.kb.a.1000
MicrosoftTrojan:Win32/Wacatac.A!ml
ViRobotTrojan.Win.Z.Agent.640512.BG
GDataWin32.Application.PUPStudio.B
GoogleDetected
AhnLab-V3Malware/Win.Generic.C5136402
McAfeeRDN/Generic.grp
VBA32BScope.Trojan.Downloader
MalwarebytesGeneric.Malware.AI.DDS
TrendMicro-HouseCallTROJ_GEN.R002H06L523
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/FlyApplication
BitDefenderThetaGen:NN.ZexaF.36608.Ny0baeGlw2ob
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Trojan.Generic.32177735?

Trojan.Generic.32177735 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment