About “Trojan.Generic.33358149” infection

The Trojan.Generic.33358149 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.33358149 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Generic.33358149?


File Info:
name: 0C9F0D3CBE34D7BA2C00.mlw
path: /opt/CAPEv2/storage/binaries/4e383a2361757fde65198470a74c0d1b3ee9d54f483914b87ad6c5354c988a88
crc32: 6BF908E3
md5: 0c9f0d3cbe34d7ba2c008a7fe98168e2
sha1: ba2c50a361ed5b75f25d76251beda171d8cfa779
sha256: 4e383a2361757fde65198470a74c0d1b3ee9d54f483914b87ad6c5354c988a88
sha512: f282264909cde5547cd45a2e3f9b9dbfffd7cfbef672dddab3096a9b567745121b2e72c4fe872ae39d7da762de27c23eb8ecec970eda3f4880a186968771a59e
ssdeep: 1536:0TXB+5p3B8EHlM4tmJIxqG0/7vdii2gxUxPpZzmbOcVf2nxqG0/7vd5:0Ts3BRFNmJIxqdLdit/ZzmKZxqdLd5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T190A3397226E5A2E6E1163DF0D4666B29AB76AEF21921C94F07F835DD58F0243CC0349E
sha3_384: 95e922c940c7b254cde42636421d92f10d237b1ac38287e2f661ec7565ba36663078ef92a14a0acaf55a9497f5e032ac
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-02-21 19:46:29

Version Info:
0: [No Data]

Trojan.Generic.33358149 also known as:

Lionic	Riskware.Win32.Agent.1!c
DrWeb	Trojan.Siggen9.53672
MicroWorld-eScan	Trojan.Generic.33358149
ALYac	Trojan.Generic.33358149
Malwarebytes	Malware.Heuristic.1001
Alibaba	Downloader:Win32/Generic.8e353395
Cyren	W32/Adware.ZCDD-5577
Elastic	malicious (high confidence)
Paloalto	generic.ml
ClamAV	Win.Adware.RelevantKnowledge-9939891-0
Kaspersky	not-a-virus:Downloader.Win32.Agent.edef
BitDefender	Trojan.Generic.33358149
Avast	Win32:PUP-gen [PUP]
Emsisoft	Trojan.Generic.33358149 (B)
VIPRE	Trojan.Generic.33358149
McAfee-GW-Edition	BehavesLike.Win32.Generic.nh
Trapmine	suspicious.low.ml.score
FireEye	Trojan.Generic.33358149
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.Generic.33358149
Google	Detected
MAX	malware (ai score=82)
Arcabit	Trojan.Generic.D1FD0145
ZoneAlarm	not-a-virus:Downloader.Win32.Agent.edef
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!0C9F0D3CBE34
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H07D223
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	NSIS/Agent.3672!tr.dldr
AVG	Win32:PUP-gen [PUP]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_70% (D)

How to remove Trojan.Generic.33358149?

Trojan.Generic.33358149 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X