Trojan

Should I remove “Trojan.Generic.35310981”?

Malware Removal

The Trojan.Generic.35310981 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.35310981 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Creates a copy of itself
  • Deletes executed files from disk
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Generic.35310981?


File Info:

name: B644F2D92F1C8FF975D0.mlw
path: /opt/CAPEv2/storage/binaries/63bd7dd558cac7ad21aeaf810f1a3339bb754c453d5fe737ba584ed510b88acd
crc32: F4D4E53F
md5: b644f2d92f1c8ff975d0ce29f39fafbf
sha1: 721a92113221e00275b820f5bea2a2900cff1c98
sha256: 63bd7dd558cac7ad21aeaf810f1a3339bb754c453d5fe737ba584ed510b88acd
sha512: f6ba8150f186554074b1c016ffd4b3377378b0fe2568f4b7fb8f4d2aaec67ec1254aa5a903d4bcb455a1a98794e1eefe18e45e83dba4eaf63d7145664c1decad
ssdeep: 12288:KkiTgwT446ipT4YYfXHUO/jVDa/ZSC+gRHnhvMCtjW:qgqAMT4Pfja/ZSC+gVueC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1224549191E9641B3EF2521FF691EAEE255105D3F7612FA617380F97A3E22BCD80C6930
sha3_384: 844ae57ff0b5639d89b00e92c6783315f82c408c0dd8f591079fdbcaf95026bcf6d674b3be55e0becba497bfd5f27d3a
ep_bytes: 7b103a482b79becf2e98b75eacd2dfe4
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Generic.35310981 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Generic.35310981
ClamAVWin.Packed.Dridex-9860931-1
FireEyeGeneric.mg.b644f2d92f1c8ff9
SkyhighBehavesLike.Win32.Generic.th
McAfeeTrojan-FVOQ!B644F2D92F1C
ZillyaTrojan.Kryptik.Win32.3105278
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
AlibabaTrojan:Win32/Copak.ac5cfb19
K7GWTrojan ( 005a45ef1 )
Cybereasonmalicious.13221e
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.GIFY
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Copak.cbzvk
BitDefenderTrojan.Generic.35310981
NANO-AntivirusTrojan.Win32.Selfmod.jzsjql
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Selfmod.ka
TACHYONTrojan/W32.Selfmod
EmsisoftTrojan.Generic.35310981 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Siggen12.42976
VIPRETrojan.Generic.35310981
TrendMicroTROJ_GEN.R002C0DBT24
Trapminesuspicious.low.ml.score
SophosMal/Inject-GJ
IkarusTrojan.Win32.Glupteba
GDataWin32.Trojan.PSE.15NLAT
JiangminTrojan.Generic.cwseg
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.Kryptik.gify
KingsoftWin32.Trojan.Copak.gen
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Generic.D21ACD85
ViRobotTrojan.Win.Z.Kryptik.1245185.QAK
ZoneAlarmTrojan.Win32.Copak.cbzvk
MicrosoftTrojan:Win32/Glupteba.MT!MTB
VaristW32/Trojan.MJSE-7842
AhnLab-V3Trojan/Win.OB.C5394211
Acronissuspicious
VBA32Trojan.Copak
ALYacTrojan.Generic.35310981
MAXmalware (ai score=89)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DBT24
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
BitDefenderThetaGen:NN.ZexaF.36744.m9Z@autBeKp
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Generic.35310981?

Trojan.Generic.35310981 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment