Should I remove “Trojan.Generic.33595625 (B)”?

The Trojan.Generic.33595625 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.33595625 (B) virus can do?

CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Generic.33595625 (B)?


File Info:
name: 16A5F17E8B1B6D82BB49.mlw
path: /opt/CAPEv2/storage/binaries/f7a1eeff976d6fad79538a97b63638544787cc3920bcfe3ea14c500d444d7d91
crc32: 5C8FA466
md5: 16a5f17e8b1b6d82bb49a9b963a1cecf
sha1: 3e65ebe56792587c3ac8c051db6019ca3ac3735b
sha256: f7a1eeff976d6fad79538a97b63638544787cc3920bcfe3ea14c500d444d7d91
sha512: ea5af2f3deef08a298c83b4e6ccbb1d4647ef8628adb56b1e83ce892c403186f6800ed61edd306dbe345717f2fc75bd9ba8608308a8814e2edc1af448befcab9
ssdeep: 98304:IEOyCP7akBvmcqTj7G5O07XXcpAoUJroxAD:myCO8qTXGo851CAD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FB16E13B72E8652ED27A073147B1E3788BB7EE51650AC91A2BF0290FFF725501D2A351
sha3_384: 8680926dd9908bde246bd46f0ce4ab7ded5b6b3977af57e4b8ce32c5194abbaa6786eb888332b7ee8cf12ab324d9b07f
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-04-25 16:38:12

Version Info:
Translation: 0x0000 0x04b0
FileDescription: WindowsApplication33
FileVersion: 1.0.0.0
InternalName: ninja-setup-3.2.10.exe
LegalCopyright: Copyright ©  2023
OriginalFilename: ninja-setup-3.2.10.exe
ProductName: WindowsApplication33
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan.Generic.33595625 (B) also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.1888
FireEye	Generic.mg.16a5f17e8b1b6d82
Sangfor	Backdoor.Msil.Bladabindi.V83j
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36164.@t0@aWDTeJf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.CFC
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
Avast	Win32:RATX-gen [Trj]
Rising	Backdoor.Bladabindi!8.B1F (CLOUD)
Emsisoft	Trojan.Generic.33595625 (B)
F-Secure	Heuristic.HEUR/AGEN.1307837
McAfee-GW-Edition	Artemis
Trapmine	suspicious.low.ml.score
Ikarus	Trojan.MSIL.Crypt
Avira	HEUR/AGEN.1307837
Microsoft	Backdoor:MSIL/Bladabindi.AL
ZoneAlarm	HEUR:Backdoor.MSIL.Bladabindi.gen
GData	MSIL.Backdoor.Bladabindi.0XKS52
McAfee	Artemis!16A5F17E8B1B
VBA32	Backdoor.MSIL.Bladabindi
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R03BH0CDS23
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.BVPX!tr
AVG	Win32:RATX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan.Generic.33595625 (B)?

Trojan.Generic.33595625 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X