Should I remove “Trojan.Generic.34256997”?

The Trojan.Generic.34256997 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.34256997 virus can do?

• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Deletes executed files from disk

How to determine Trojan.Generic.34256997?

File Info:
name: C764C8F1695F7ACC98BF.mlw
path: /opt/CAPEv2/storage/binaries/b5b479dd1d71c071622e9ffbfe4019f632f60d68dc0ad7a32dc8eb559493f584
crc32: 7C7B214D
md5: c764c8f1695f7acc98bfda95747e7141
sha1: d5a9eafac9d1cf382e5eae11a6ed9d51067bacd3
sha256: b5b479dd1d71c071622e9ffbfe4019f632f60d68dc0ad7a32dc8eb559493f584
sha512: d2c55b40552e4f493acb0433e6010742ff493c1078a5f55b27a951230972158a823c1d6fbe570bc00f4d57fb5a29a63dd6545a8a6c44c53b0683321a01e6e367
ssdeep: 1536:D7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfzxy4O3:fq6+ouCpk2mpcWJ0r+QNTBfzQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T119936C05F3E242FAD9E2053200B6612F9776A6248724ADE7C34C3C839653ED59A7D3F9
sha3_384: 90d82b475b89b14f4dfcb730feb56825c43682a7d4f8b37ec1a9170fcd163700d00e9ac03d0e2e5e3af88df4e50aeaf6
ep_bytes: 68ac00000068000000006810804100e8
timestamp: 2019-07-30 08:52:50

Version Info:
0: [No Data]

Trojan.Generic.34256997 also known as:

How to remove Trojan.Generic.34256997?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.