Categories: Trojan

Trojan.Generic.34304971 removal guide

The Trojan.Generic.34304971 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.34304971 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Generic.34304971?


File Info:
name: 0357AF0CB11B3C93E524.mlwpath: /opt/CAPEv2/storage/binaries/58d7304b9ab9ee4386524355bf0ca85223bf944e83880f917bb7e583c464ef54crc32: D91F5D4Bmd5: 0357af0cb11b3c93e524d021f4834a81sha1: 054d302238063d0829a5398220707fdf07eaa768sha256: 58d7304b9ab9ee4386524355bf0ca85223bf944e83880f917bb7e583c464ef54sha512: 08ab121046db64c6c0a21973f5919cd5db616e5ae2668fce3ee294db34a9a52747b5516487f9fcc2cc17dbdc87c0711bd8c48e5dfc1737d42cde6d4e67443a12ssdeep: 196608:m0XBukrfdekRtDtGZ2dqXa4KYwmN2demd:DXVrFrRdY0dqHKYlotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B3663342B3C28977F499B934483382D08E16FE946AE4921B7D75F70F0EB139269B3791sha3_384: 4793f5f73faa318a661c0ac7a68d98adadb87b87f807b2095a4b135c4014b554399ba39c3a002c20ba4187c7bd99883fep_bytes: 558bec83c4a453565733c08945c48945timestamp: 2013-01-30 14:21:56
Version Info:
Comments: This installation was built with Inno Setup.CompanyName:                                                             FileDescription: Advanced IP Scanner Setup                                   FileVersion: 2.3.2161            LegalCopyright: Copyright © 2002-2013 Famatech Corp. and its licensors.  All rights reserved.                       ProductName: Advanced IP Scanner                                         ProductVersion: 2.3                                               Translation: 0x0000 0x04b0

Trojan.Generic.34304971 also known as:

Lionic	Adware.Win32.DealPly.2!c
MicroWorld-eScan	Trojan.Generic.34304971
FireEye	Trojan.Generic.34304971
Skyhigh	Artemis!Trojan
ALYac	Trojan.Generic.34304971
Alibaba	Trojan:Win32/Swrort.9ab049d9
Arcabit	Trojan.Generic.D20B73CB
ESET-NOD32	a variant of Generik.BHIYWW
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.DealPly.gen
BitDefender	Trojan.Generic.34304971
Avast	FileRepMalware [Hack]
Tencent	Win32.AdWare.Dealply.Ywhl
Emsisoft	Trojan.Generic.34304971 (B)
F-Secure	Trojan.TR/AD.Swrort.dbwlg
VIPRE	Trojan.Generic.34304971
TrendMicro	TROJ_GEN.R002C0DKJ23
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Avira	TR/AD.Swrort.dbwlg
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Swrort.A
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.DealPly.gen
GData	Trojan.Generic.34304971
McAfee	Artemis!0357AF0CB11B
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0DKJ23
AVG	FileRepMalware [Hack]
CrowdStrike	win/grayware_confidence_70% (D)