About “Trojan.Generic.34162888” infection

The Trojan.Generic.34162888 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.34162888 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Trojan.Generic.34162888?


File Info:
name: 8EC8DA82AB53620E144B.mlw
path: /opt/CAPEv2/storage/binaries/3d7badf6e572708793d02ef885e5aac20a17a689b45622a58981b532745fcdcc
crc32: 47C91CFA
md5: 8ec8da82ab53620e144b9080147c807c
sha1: 60a28455f952919ca9ed333be699f69bdf71781e
sha256: 3d7badf6e572708793d02ef885e5aac20a17a689b45622a58981b532745fcdcc
sha512: c3ec234cec78b2e85b7ca310df1d54968c9208ab19ecdfa8bfb717dc135a19412822d2a0984f1fdebb8944c50d88e63080652c2074bf950325ab28942d96c0ee
ssdeep: 393216:Y+BKWbyyXh27eGoK1mn6RTMAwR4XeGwaB1rRkh95tuF:ZX27eGWnZAwxdaf2tIF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17FF63349F671C842E89E9330C7B1FCF493A5BFB66C42A1874A91DF2F30366C66642947
sha3_384: ded96e167452dbb95c567ab8849bf21db0da5dc41a649e05ffb158420dfd2da8510af6b33b76e0ba4df790ee856d9216
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-18 21:33:23

Version Info:
CompanyName: 中国蓝主题站
FileDescription: 2013一月日历雪人WIN7主题
FileVersion: 1.0.0.0
LegalCopyright: Copyright (C) 2012 中国蓝主题站
ProductName: 2013一月日历雪人WIN7主题
Translation: 0x0804 0x03a8

Trojan.Generic.34162888 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Funshion.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader9.25858
MicroWorld-eScan	Trojan.Generic.34162888
FireEye	Trojan.Generic.34162888
Skyhigh	BehavesLike.Win32.Dropper.wc
McAfee	Artemis!8EC8DA82AB53
Malwarebytes	Generic.Malware/Suspicious
Sangfor	PUP.Win32.Funshion.V014
CrowdStrike	win/grayware_confidence_100% (W)
Symantec	PUA.Gen.2
ESET-NOD32	a variant of Win32/Funshion.E potentially unwanted
ClamAV	Win.Virus.Parite-10014804-0
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.Generic.34162888
NANO-Antivirus	Trojan.Win32.Drop.dytyct
Avast	Win32:Malware-gen
Emsisoft	Trojan.Generic.34162888 (B)
F-Secure	Heuristic.HEUR/AGEN.1338488
VIPRE	Trojan.Generic.34162888
TrendMicro	TROJ_GEN.R002C0XIT23
Sophos	Generic Reputation PUA (PUA)
Ikarus	PUA.Funshion
Avira	HEUR/AGEN.1338488
Antiy-AVL	GrayWare/Win32.Funshion.e
Arcabit	Trojan.Generic.D20948C8
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.Agent.gen
GData	Trojan.Generic.34162888
Google	Detected
ALYac	Trojan.Generic.34162888
MAX	malware (ai score=82)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0XIT23
Tencent	Win32.Trojan-Downloader.Agent.Qgil
Yandex	Trojan.GenAsa!LXFEOcrXMns
SentinelOne	Static AI – Suspicious PE
Fortinet	Riskware/Funshion
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan.Generic.34162888?

Trojan.Generic.34162888 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X