Trojan.Generic.32997492 (file analysis)

The Trojan.Generic.32997492 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.32997492 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Generic.32997492?


File Info:
name: F8DFFDDD4E9E2754FEE6.mlw
path: /opt/CAPEv2/storage/binaries/aa475a593baa884535c4681e4b557af35b1df544c8b3baab3044eb7e92a9c2df
crc32: C753A680
md5: f8dffddd4e9e2754fee6cdddb8632ead
sha1: 47f63429a9cbb4e5e5e2f7963aa4a417393ced0c
sha256: aa475a593baa884535c4681e4b557af35b1df544c8b3baab3044eb7e92a9c2df
sha512: 9c95a718839e4f7de85c1cf2f875d5c303457cb0b7238a83c73d81f945bc6d340ebb9926a9a70af8bf1767af46e3ff2e9d4291b48b3237cfe5bb6a19f59f1ea9
ssdeep: 24576:D+jISZUfAvy2R55ZbhQV5glCbsiVgb74rSVzMurA1iDhrI4LLtLoiZgbAI3fDxJW:6nUfSy2XrdQV5glCYArSfBlSdwXgO9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F5A5D0C50564532FC3AD3F7529AF02EAB0CC6145934668E371D5BF8E8F4C9CA2372A5A
sha3_384: 31a22f0597ad581f61318db32d592cb50b8b62d7243ed1ce8fcfe27b29ef85568157f6d8c2a3554dce8f8f9b3731ef7e
ep_bytes: e9000000006a409068001000009068b1
timestamp: 2017-12-05 23:10:51

Version Info:
0: [No Data]

Trojan.Generic.32997492 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.VirLock.18
MicroWorld-eScan	Trojan.Generic.32997492
ClamAV	Win.Virus.Virlock-6629320-0
FireEye	Trojan.Generic.32997492
ALYac	Trojan.Generic.32997492
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004dabf41 )
Alibaba	Malware:Win32/km_2439e.None
K7GW	Trojan ( 004dabf41 )
Cybereason	malicious.9a9cbb
Cyren	W32/Ransom.MA.gen!Eldorado
Symantec	Trojan.Gen.MBT
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.Generic.32997492
Emsisoft	Trojan.Generic.32997492 (B)
VIPRE	Trojan.Generic.32997492
TrendMicro	PE_VIRLOCK.L
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.vh
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Trojan.Generic.32997492
Antiy-AVL	Virus/Win32.Virlock.k
Arcabit	Trojan.Generic.D1F78074
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Acronis	suspicious
McAfee	Artemis!F8DFFDDD4E9E
MAX	malware (ai score=82)
Cylance	unsafe
TrendMicro-HouseCall	PE_VIRLOCK.L
Ikarus	Virus.Win32.Virlock
MaxSecure	Virus.polyransom.k
Fortinet	W32/VirLock.L!dam
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Generic.32997492?

Trojan.Generic.32997492 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X