Trojan

Trojan.Generic.33333992 removal guide

Malware Removal

The Trojan.Generic.33333992 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.33333992 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Generic.33333992?


File Info:

name: D1FB54BC9E83806CC626.mlw
path: /opt/CAPEv2/storage/binaries/f46bc8620eb7835002b526b15a3b5f6ca2715f3de2322347a17781b2e8cf9da3
crc32: 1237F992
md5: d1fb54bc9e83806cc6262af426f54108
sha1: c234db842c6b567337aaee1842178346002658c7
sha256: f46bc8620eb7835002b526b15a3b5f6ca2715f3de2322347a17781b2e8cf9da3
sha512: 701f4a9382d0e3cd3ad0de670e9006c8b8940b4c1e9e8e3ce6633d66a0867baf5231a810c65b0791c61ee59a0a4a0581dffc565d5f191b9ac11a5c49455eff46
ssdeep: 12288:9MrWy909wDBwEyu8Hr5N/ts0+CKpkZkOiF9LXej/IsTa14cbZH:PyYcBwGi5N/5ZZkvLXejAqa1tZH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17CE412426FD4D433DAF41BB14AFA53931B367CA00D7897AF2745A94E4CB29C49438B3A
sha3_384: b544d39a1ccdbafeffcd1a4e597d257903c6086bc45c8ce4bbc259e39bfffe2366135c100bd2394a32dd113829ff6cb2
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Trojan.Generic.33333992 also known as:

LionicTrojan.Win32.Agent.Y!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen19.32857
MicroWorld-eScanTrojan.Generic.33333992
ClamAVWin.Ransomware.Tofsee-9994176-0
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacTrojan.Generic.33333992
MalwarebytesGeneric.Trojan.Injector.DDS
VIPRETrojan.Generic.33333992
SangforTrojan.Msil.Disabler.Vp57
K7AntiVirusTrojan ( 005a16651 )
AlibabaTrojanSpy:Win32/Zenpak.010d4baa
K7GWTrojan ( 005a16651 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/Kryptik.JKR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 99)
KasperskyUDS:Trojan.MSIL.Agent.gen
BitDefenderTrojan.Generic.33333992
NANO-AntivirusTrojan.Win32.Disabler.junsud
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.MSIL.Agent.hg
EmsisoftTrojan.Generic.33333992 (B)
F-SecureTrojan.TR/Disabler.ocayi
TrendMicroTROJ_GEN.R002C0PBK23
McAfee-GW-EditionBehavesLike.Win32.AgentTesla.jc
Trapminemalicious.high.ml.score
FireEyeTrojan.Generic.33333992
SophosMal/Generic-S
SentinelOneStatic AI – Malicious SFX
GDataWin32.Trojan.PSE.1Y731WE (2x)
JiangminBackdoor.Tofsee.giq
AviraTR/Disabler.ocayi
MAXmalware (ai score=80)
Antiy-AVLTrojan/Win32.Wacatac
XcitiumApplicUnwnt@#1ftfc2ja2g1dd
ArcabitTrojan.Generic.D1FCA2E8
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftTrojan:Win32/plugx.psyC!MTB
GoogleDetected
McAfeeArtemis!D1FB54BC9E83
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0PBK23
RisingTrojan.Kryptik!1.E47D (CLASSIC:bWQ1Og1hFSx6Nlh97w)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.8703358.susgen
FortinetPossibleThreat
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan.Generic.33333992?

Trojan.Generic.33333992 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment