About “Trojan.Generic.32972811” infection

The Trojan.Generic.32972811 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.32972811 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Generic.32972811?


File Info:
name: 4438403D98AA55FA6104.mlw
path: /opt/CAPEv2/storage/binaries/ab7599aa5d9e4a3755654f637d56f3f8576ff4a2e09fb04ddf3b86882923f190
crc32: D4BDB9CF
md5: 4438403d98aa55fa6104c48d49ac8067
sha1: a7f17f2a1c6be88da53a1e2650fc71db18010123
sha256: ab7599aa5d9e4a3755654f637d56f3f8576ff4a2e09fb04ddf3b86882923f190
sha512: 089ff0d2e3d4ac5af072cdd75543d544747c7625a061c31dfa9e32d99235a3eaa25542dceeb8f9e328d69939f607aa7b9df4e939f72d5fcfcd14d06526dffb6c
ssdeep: 12288:wfiCFHvPKQr9ipIRlzbcL5dl7K13MTMV7tPEI58v5+gF5Rd5d4Li9++Jpqt:wP9vzr9sILzboLl7K5MTEP7Kv5rdB++K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19E452337AEA6EDE8D7A4D4B929F0698F1420DD308EC2156671730292C757BD7A3BCC81
sha3_384: bae2f6e5cea08144796a23f871c140065bfc3e64fa4a1c0a1f5aa9014d7399fbe5b5f5f071b2948ac6dbe13e7afbccca
ep_bytes: 558bec83c4c081f1782140006a6739c9
timestamp: 2008-04-11 10:07:22

Version Info:
0: [No Data]

Trojan.Generic.32972811 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.kZ1M
tehtris	Generic.Malware
DrWeb	Trojan.Packed.142
MicroWorld-eScan	Trojan.Generic.32972811
ClamAV	Win.Trojan.Agent-403315
ALYac	Trojan.Generic.32972811
Zillya	Trojan.Zbot.Win32.2058
Sangfor	Infostealer.Win32.Zbot.Veua
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanPSW:Win32/Other.c4ed9c07
K7GW	Spyware ( 0000017b1 )
K7AntiVirus	Spyware ( 0000017b1 )
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.Generic.32972811
Avast	Other:Malware-gen [Trj]
Tencent	Malware.Win32.Gencirc.11491e2f
Emsisoft	Trojan.Generic.32972811 (B)
VIPRE	Trojan.Generic.32972811
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Trojan.Generic.32972811
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.Zbot
GData	Trojan.Generic.32972811
Jiangmin	TrojanSpy.Zbot.hmf
Antiy-AVL	Trojan[Spy]/Win32.Zbot
Arcabit	Trojan.Generic.D1F7200B
Microsoft	PWS:Win32/Zbot
Google	Detected
McAfee	Artemis!4438403D98AA
MAX	malware (ai score=83)
Cylance	unsafe
Panda	Trj/CI.A
Rising	Stealer.Zbot!8.109D7 (TFE:1:pjuxg4IObHN)
Yandex	TrojanSpy.Zbot!UepCRLme5qo
SentinelOne	Static AI – Malicious PE
AVG	Other:Malware-gen [Trj]
Cybereason	malicious.a1c6be
DeepInstinct	MALICIOUS

How to remove Trojan.Generic.32972811?

Trojan.Generic.32972811 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X