Trojan

Trojan.Generic.5717641 removal guide

Malware Removal

The Trojan.Generic.5717641 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.5717641 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Generic.5717641?


File Info:

name: 5CA166887EF8FD3610DC.mlw
path: /opt/CAPEv2/storage/binaries/1b1d2ddf1cbf934afa3369d4bf7aec068baf73feacd569ff81f409c795bb2388
crc32: 9D4398BE
md5: 5ca166887ef8fd3610dc648d84d17c5c
sha1: f3d3f9de810bc06f33eeabe10d5effffd6589608
sha256: 1b1d2ddf1cbf934afa3369d4bf7aec068baf73feacd569ff81f409c795bb2388
sha512: 173de9a4df3eb0e1225f5d2891f572b41e5fd260ae79bd1a7017078653d0828b104ac980654e8634080cf5ebd3f2d7205ae3f493922024d29f0a579f84cb3227
ssdeep: 3072:+q4eLhG6Z9SiLfl18THCYZw1ZYr6Hx+zSgybj5IzgWaLO/V8A:7L+irlonZpr6xB5ZWaS/V8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17FB3120D4686BB8BE18D53F7DE0B1E71FAA75693232F5B4389253A277C293E5140D132
sha3_384: b6606d9359ef72e9e2e36c84cbd3c592b93a0b7cb72f40bec16de831271fc349b5d0518e891c948283fb9b5904a9bc10
ep_bytes: 60be001042008dbe0000feff57eb0b90
timestamp: 2008-12-19 17:16:06

Version Info:

0: [No Data]

Trojan.Generic.5717641 also known as:

LionicTrojan.Win32.OnLineGames.d!c
DrWebTrojan.PWS.Wsgame.23697
MicroWorld-eScanTrojan.Generic.5717641
ALYacTrojan.Generic.5717641
CylanceUnsafe
Cybereasonmalicious.87ef8f
VirITTrojan.Win32.OLG.AWK
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Keygen.AIH potentially unsafe
TrendMicro-HouseCallCRCK_KEYGEN
ClamAVWin.Malware.Onlinegames-6998911-0
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.Generic.5717641
NANO-AntivirusTrojan.Win32.Wsgame.bsjeqd
AvastWin32:Trojan-gen
TencentWin32.Trojan.Psw.Szbt
Ad-AwareTrojan.Generic.5717641
EmsisoftTrojan.Generic.5717641 (B)
ComodoMalware@#1dmhguszia9fr
ZillyaTrojan.OnLineGames.Win32.13530
TrendMicroCRCK_KEYGEN
McAfee-GW-EditionBehavesLike.Win32.Dropper.cc
FireEyeTrojan.Generic.5717641
SophosKeygen (PUA)
IkarusTrojan-GameThief.Win32.OnLineGames
GDataTrojan.Generic.5717641
JiangminTrojan/PSW.OnLineGames.bbuv
Antiy-AVLTrojan/Generic.ASMalwS.8715A1
KingsoftWin32.PSWTroj.OnLineGames.(kcloud)
ArcabitTrojan.Generic.D573E89
ViRobotTrojan.Win32.PSWIGames.116224.G
MicrosoftTrojan:Win32/Wacatac.B!ml
APEXMalicious
RisingTrojan.Win32.Generic.125DDCB3 (C64:YzY0OsqsbWu1Q8mt)
YandexTrojan.GenAsa!YzWsjAsWo5w
MAXmalware (ai score=100)
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Patcher
AVGWin32:Trojan-gen
PandaGeneric Malware

How to remove Trojan.Generic.5717641?

Trojan.Generic.5717641 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment