About “Trojan.Generic.32348192 (B)” infection

The Trojan.Generic.32348192 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.32348192 (B) virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Generic.32348192 (B)?


File Info:
name: 2174D38617D1FAF20D1B.mlw
path: /opt/CAPEv2/storage/binaries/dd67dd2d1956177c853be76198ba7e487109961c5e5ad518911276dc8bfb5164
crc32: C51359AC
md5: 2174d38617d1faf20d1b21c065b21287
sha1: c2c2835a90ea063c817b2cf37a23d00caa6093cf
sha256: dd67dd2d1956177c853be76198ba7e487109961c5e5ad518911276dc8bfb5164
sha512: 20382b40121cd3602d2d6ac970535dba74dbaa154abeb991692c270060419b78834cf59e7648a9a9c047f3c751d73f11e266e7a920e72a7e66cd69f87451a3f6
ssdeep: 24576:9xGleos7k7X4SmWqW4IPw3VDlIQ865M+RysUwNSCfp+I8crsWXsYKpgrYhF7DJW7:WQ9A3m7W4ICIQ865pRyhjpERk5VWqptq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B265F117F3818576D03149B88C2AA094AF2BBD201EF1241E3EF4FB4D4E7A65358367A7
sha3_384: 5703d4b6151f0c1a3b3b15f3f9fe4ab40607ae6d314150ed77feb46e2a4c017749f86679efe672354784405e93ebef18
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2014-07-09 07:58:13

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: 小新日历                                                        
FileDescription: 小新日历最专业日历应用平台                                               
FileVersion: 2014.0905.1619.36   
LegalCopyright: Copyright © 2012-2014 小新日历, Inc.                                                                    
ProductName: 小新日历                                                        
ProductVersion: 4.0                                               
Translation: 0x0000 0x04b0

Trojan.Generic.32348192 (B) also known as:

Lionic	Trojan.Win32.CDur.lxkN
MicroWorld-eScan	Trojan.Generic.32348192
FireEye	Trojan.Generic.32348192
Skyhigh	BehavesLike.Win32.Dropper.tc
McAfee	Artemis!2174D38617D1
Cylance	unsafe
CrowdStrike	win/grayware_confidence_100% (D)
Arcabit	Trojan.Generic.D1ED9820
Cynet	Malicious (score: 100)
BitDefender	Trojan.Generic.32348192
Sophos	Generic ML PUA (PUA)
VIPRE	Trojan.Generic.32348192
Emsisoft	Trojan.Generic.32348192 (B)
Varist	W32/A-061fc660!Eldorado
GData	Trojan.Generic.32348192
Google	Detected
VBA32	TrojanDownloader.Adload
ALYac	Trojan.Generic.32348192
MAX	malware (ai score=83)
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H09AO24
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.121218.susgen
Cybereason	malicious.a90ea0
DeepInstinct	MALICIOUS

How to remove Trojan.Generic.32348192 (B)?

Trojan.Generic.32348192 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X