Trojan

Trojan.Generic.33513882 removal

Malware Removal

The Trojan.Generic.33513882 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.33513882 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities to create a scheduled task
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Generic.33513882?


File Info:

name: 98EA3B4FBF2DA12DE0BE.mlw
path: /opt/CAPEv2/storage/binaries/6b06502fa8cb36dc484cc4f7a8af7911d3a8878c99c2abe36e597dd328cfeb03
crc32: 3503DF7D
md5: 98ea3b4fbf2da12de0be105efc0a968d
sha1: 15ac1774a0bba4db9c7df883eaafb06040b8028e
sha256: 6b06502fa8cb36dc484cc4f7a8af7911d3a8878c99c2abe36e597dd328cfeb03
sha512: ff9b606a44ae476f5bb15b2c441a964eb9477ccd551c598d234a4ba2a103591ab190d45b661ed66c7c59379a9f914df9ecf9a508d876aac8006fac0ee4ca2160
ssdeep: 768:attocgrYFfKDTOvyk3JkFkx9kE+j+P2Qnndxxha5megsscZlgYsTCfOM16MsM:wtycITTux9kEZP31elZCYeOOM9
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E263AF73EA88D243D4CD46311A768A5023339C97B5B2AD1275DE3856FBF33922934A1F
sha3_384: cb2334992ba24c532d8599a8597adf68eb6fccefaa7a6d2def5333e6755df96dc09d6921ec9d87a0a2d0ef575c648876
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan.Generic.33513882 also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.Generic.33513882
FireEyeGeneric.mg.98ea3b4fbf2da12d
McAfeeArtemis!98EA3B4FBF2D
MalwarebytesGeneric.Worm.AutoRun.DDS
ZillyaTrojan.Agent.Win32.153302
SangforTrojan.Win32.Agent.Vfbo
AlibabaTrojanSpy:Win32/QuickBatch.42bab200
Cybereasonmalicious.fbf2da
VirITTrojan.Win32.Generic.IHH
CyrenW32/Trojan.RUWK-2472
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Generik.CKKVXFY
APEXMalicious
ClamAVWin.Trojan.Agent-682389
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.Generic.33513882
AvastWin32:Trojan-gen
EmsisoftTrojan.Generic.33513882 (B)
F-SecurePrivacyRisk.SPR/QuickBatch.Gen
DrWebTrojan.Siggen6.47574
VIPRETrojan.Generic.33513882
TrendMicroTROJ_GEN.R067C0WDM23
McAfee-GW-EditionBehavesLike.Win32.Worm.kc
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S (PUA)
IkarusTrojan.Win32.Spy
GDataTrojan.Generic.33513882
WebrootW32.Malware.Gen
GoogleDetected
AviraSPR/QuickBatch.Gen
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.SGeneric
XcitiumWorm.Win32.Autorun.dy02@4ntnp0
ArcabitTrojan.Generic.D1FF619A
ZoneAlarmUDS:DangerousObject.Multi.Generic
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
BitDefenderThetaAI:Packer.DE8116A81D
ALYacTrojan.Generic.33513882
VBA32Trojan.Agent
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R067C0WDM23
RisingTrojan.Undefined!8.1327C (CLOUD)
YandexTrojan.GenAsa!7kdPV5ZGpes
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.206793626.susgen
FortinetPossibleThreat
AVGWin32:Trojan-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan.Generic.33513882?

Trojan.Generic.33513882 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment