Trojan.Generic.34490672 (file analysis)

The Trojan.Generic.34490672 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.34490672 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Generic.34490672?

File Info:
name: CD44C2793553B737A5C7.mlw
path: /opt/CAPEv2/storage/binaries/87d44bd46c505be96fe8300cf87f683289e3bee137ce56e9e2d726ae2d8f0a66
crc32: 0283C117
md5: cd44c2793553b737a5c785101a93e6e5
sha1: e67b9389f5dfff54aa9b38fc79569bca1106fe63
sha256: 87d44bd46c505be96fe8300cf87f683289e3bee137ce56e9e2d726ae2d8f0a66
sha512: 2b597a4948403a77e368c2110eeb0b89c19c1f6bd47d439f511933a3b70e7003cb0ee606bb26142df134eac40d9995bf6cf0870081e0cd21363cd54058f69ffb
ssdeep: 24576:MAkmi3mFrzXd4Jy1JzfLIzpa2xNDGINiWj+trBCZR66FCM9CdoXGAffuu2EBK2kr:MWi2FrzN4Jy1JzfcA29arix9sbAfcL
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T18C757D21E241813DCCEB31F656BD713D666CBAB2030461C722C81BF9DB666E17E3469B
sha3_384: 4013ac4e0b8b7757c527d48c3a07014736d4fb5e5cdcd9da16ca61debc6e2429dea0b4b0dd48abb4afdb01e1813631ee
ep_bytes: 8bff558bec837d0c017505e85f08fdff
timestamp: 2010-02-02 01:50:04

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Windows Image Helper
FileVersion: 6.12.0002.633 (debuggers(dbg).100201-1203)
InternalName: DBGHELP.DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: DBGHELP.DLL
ProductName: Debugging Tools for Windows(R)
ProductVersion: 6.12.0002.633
Translation: 0x0409 0x04b0

Trojan.Generic.34490672 also known as:

How to remove Trojan.Generic.34490672?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.