Trojan

About “Trojan.Generic.35030886” infection

Malware Removal

The Trojan.Generic.35030886 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.35030886 virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Trojan.Generic.35030886?


File Info:

name: 0A11A908AEC80B3F7EB3.mlw
path: /opt/CAPEv2/storage/binaries/56eacc12a0a30e1796fb3ebb750b08279df16e955549383940ea709b9466f844
crc32: EBD0B3E7
md5: 0a11a908aec80b3f7eb32ef86ae7471e
sha1: 7e2e9eda748b2ed0edd9996eb9cad49100bbce4b
sha256: 56eacc12a0a30e1796fb3ebb750b08279df16e955549383940ea709b9466f844
sha512: 40f097323d3fd0c3e6846d38da9d2e35e4c27793030e5e6129b69ae2263836f0138cbb02b836d06be397fd1b33d082e7e9e8870c5e94b78ec088dfd026fd5a10
ssdeep: 24:etGSkENqtDGSEHoyqvQCQ/C+FR7bdPtkZfCdBigyZk25jymI+ycuZhNKOQQGakSX:6kBVpBw/CojuJC5yK2591ulK7a39Uq
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A971021A93E8866BE4B747356FF3431262F4F8149B76977F0D8102196C91A600E71BA5
sha3_384: 7d60ab75ba5ade628be6a3ee1d829cb8db4125108bd8135a06d583d41db293c4ed06d3d25d9da4cd5016c56eaf18195b
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-01-13 14:10:25

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: w4ko5mzw.dll
LegalCopyright:
OriginalFilename: w4ko5mzw.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan.Generic.35030886 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Rozena.4!c
AVGWin32:Trojan-gen
MicroWorld-eScanTrojan.Generic.35030886
FireEyeTrojan.Generic.35030886
SkyhighGenericRXSX-KD!0A11A908AEC8
McAfeeGenericRXSX-KD!0A11A908AEC8
VIPRETrojan.Generic.35030886
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0056b29f1 )
AlibabaTrojan:MSIL/Rozena.1fa3239a
K7GWTrojan ( 0056b29f1 )
CrowdStrikewin/malicious_confidence_100% (W)
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32a variant of PowerShell/Rozena.BI
APEXMalicious
KasperskyHEUR:Trojan.MSIL.Rozena.gen
BitDefenderTrojan.Generic.35030886
AvastWin32:Trojan-gen
TencentTrojan.MSIL.Rozena.hb
EmsisoftTrojan.Generic.35030886 (B)
F-SecureTrojan.TR/Rozena.Gen
ZillyaTrojan.Rozena.Script.797
TrendMicroTROJ_GEN.R002C0PA924
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
VaristW32/MSIL_Troj.ACN.gen!Eldorado
AviraTR/Rozena.Gen
Antiy-AVLTrojan/PowerShell.Rozena
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D2168766
ZoneAlarmHEUR:Trojan.MSIL.Rozena.gen
GDataTrojan.Generic.35030886
GoogleDetected
ALYacTrojan.Generic.35030886
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PA924
IkarusTrojan.PowerShell.Rozena
MaxSecureTrojan.Malware.115739514.susgen
FortinetMSIL/GenericKDZ.68387!tr
DeepInstinctMALICIOUS

How to remove Trojan.Generic.35030886?

Trojan.Generic.35030886 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment