What is “Trojan.Generic.32348192 (B)”?

The Trojan.Generic.32348192 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.32348192 (B) virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Generic.32348192 (B)?


File Info:
name: 0ED68880E5E161374ECA.mlw
path: /opt/CAPEv2/storage/binaries/67e0ffbdca625201b19a51fcbee0e48088ad4957762775e509f4754599033ca1
crc32: 699FBD1D
md5: 0ed68880e5e161374eca8bf84eee5267
sha1: b87d86f624dad1ad9a6298a59fa0096c6455360d
sha256: 67e0ffbdca625201b19a51fcbee0e48088ad4957762775e509f4754599033ca1
sha512: 99a6ea2d8ecee6a21cebd053d9e007866c683bb8286bcfca9332c00212fae804a6a6cf037bfec05c5bbc9dd82c580fc1f4c83687eca1d8dcc425091f8535b549
ssdeep: 24576:9xGleis7k7X4SmWqW4IPw3VDlIQ865M+RysUwNSCfp+I8crsWXsYKpgrYhF7DJWh:WQ3A3m7W4ICIQ865pRyhjpERk5VWqptA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16775F117F3818576D03149B88C2AA094AF2BBD201EF1241E3EF4FB4D4E7A65358767A7
sha3_384: 395332de560459b3287ee93f45fd0e04181f50c4b86864bd1e308f964d1d69d93dd50231db28d2842652fce33aeee1b1
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2014-07-09 07:58:13

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: 小新日历                                                        
FileDescription: 小新日历最专业日历应用平台                                               
FileVersion: 2014.0903.1726.13   
LegalCopyright: Copyright © 2012-2014 小新日历, Inc.                                                                    
ProductName: 小新日历                                                        
ProductVersion: 4.0                                               
Translation: 0x0000 0x04b0

Trojan.Generic.32348192 (B) also known as:

Lionic	Trojan.Win32.CDur.lxkN
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.Generic.32348192
FireEye	Trojan.Generic.32348192
Skyhigh	BehavesLike.Win32.Generic.tc
McAfee	Artemis!0ED68880E5E1
Cylance	unsafe
Cybereason	malicious.624dad
Cynet	Malicious (score: 100)
BitDefender	Trojan.Generic.32348192
Emsisoft	Trojan.Generic.32348192 (B)
VIPRE	Trojan.Generic.32348192
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.SuspectCRC
GData	Trojan.Generic.32348192
Google	Detected
Arcabit	Trojan.Generic.D1ED9820
Varist	W32/A-061fc660!Eldorado
ALYac	Trojan.Generic.32348192
MAX	malware (ai score=80)
VBA32	TrojanDownloader.Adload
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H09AT24
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (D)

How to remove Trojan.Generic.32348192 (B)?

Trojan.Generic.32348192 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X