Trojan

Trojan.Generic.34305635 malicious file

Malware Removal

The Trojan.Generic.34305635 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.34305635 virus can do?

  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Deletes executed files from disk

How to determine Trojan.Generic.34305635?


File Info:

name: BD158A3FA7832D22ADEC.mlw
path: /opt/CAPEv2/storage/binaries/b50d85f229c435588a92e00cd1fac77c70d050dfd4cb43aaee20454e89e3563b
crc32: 98B79F11
md5: bd158a3fa7832d22adecde575dc8a76a
sha1: a7ff7e899f79cdc0115a60e5a0cab6739667fa4e
sha256: b50d85f229c435588a92e00cd1fac77c70d050dfd4cb43aaee20454e89e3563b
sha512: f5080817d37003c2ba545c0245807e423e208b0106dd44318e133b6dfd22b64673c6cbfbeda08b06a1242587ab19e607f20dc29425382699af944906ef20079c
ssdeep: 1536:D7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfzxy4Oe:fq6+ouCpk2mpcWJ0r+QNTBfzL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T107A36C05B3E242FAC5E2043201BA613F9776A6244714ADE7C34C3C879653ED99A7D3F9
sha3_384: ea66031fab60cb3ed489ff1750e92a52772eb61f34f8c6fa07ccb096a3a2ca5847321129097bc667efd01028d1a73219
ep_bytes: 68ac00000068000000006810804100e8
timestamp: 2019-07-30 08:52:50

Version Info:

0: [No Data]

Trojan.Generic.34305635 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Tiny.trFe
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.bd158a3fa7832d22
SkyhighBehavesLike.Win32.RealProtect.nh
ALYacTrojan.Generic.34305635
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusRiskware ( 00584baa1 )
AlibabaTrojan:Win32/Niktol.3a4623b0
K7GWRiskware ( 00584baa1 )
CrowdStrikewin/malicious_confidence_90% (D)
VirITTrojan.Win32.Genus.IHW
SymantecML.Attribute.HighConfidence
ESET-NOD32BAT/Agent.QBP
APEXMalicious
KasperskyHEUR:Trojan.BAT.Agentb.gen
BitDefenderTrojan.Generic.34305635
MicroWorld-eScanTrojan.Generic.34305635
RisingTrojan.Generic@AI.99 (RDML:xmJapJLUqP8d8+d7xHW6LA)
EmsisoftTrojan.Generic.34305635 (B)
F-SecureTrojan.TR/Redcap.pmhod
VIPRETrojan.Generic.34305635
SophosGeneric ML PUA (PUA)
IkarusTrojan.Win32.Agent
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Redcap.pmhod
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.Tiggre
ArcabitTrojan.Generic.D20B7663
ZoneAlarmHEUR:Trojan.BAT.Agentb.gen
GDataTrojan.Generic.34305635
VaristW32/Trojan.VFBA-8001
AhnLab-V3Malware/Win.Generic.C5253524
DeepInstinctMALICIOUS
MalwarebytesGeneric.Malware.AI.DDS
ZonerTrojan.Win32.85523
TencentTrojan.BAT.Agentb.hc
YandexTrojan.Agent!I4Q/548sWx4
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.EDI!tr
Cybereasonmalicious.99f79c

How to remove Trojan.Generic.34305635?

Trojan.Generic.34305635 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment