Trojan

Trojan.Generic.KDV.247902 malicious file

Malware Removal

The Trojan.Generic.KDV.247902 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Generic.KDV.247902 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

How to determine Trojan.Generic.KDV.247902?



File Info:

name: 037D6551006D17A6BF46.mlw
path: /opt/CAPEv2/storage/binaries/8c5f924fc79eeff9e78fce849f2ee8b9318af29d32e127cd6f38feb31d9a4174
crc32: 303D2913
md5: 037d6551006d17a6bf46c452ad7f1997
sha1: e9d873fc7019af5d2022f3319b6b9daf3cba316c
sha256: 8c5f924fc79eeff9e78fce849f2ee8b9318af29d32e127cd6f38feb31d9a4174
sha512: 2ba5e49c0befb38601a024fdbe992162bebf42162e81678b2dd97ac7de52c8c3806f1062050802e13d183a2748f5efdb77ab272fbd0776b577b755daea7f6db3
ssdeep: 384:PmXN8IAUwkcOnBRpgrmz4Vj6AHOxTT7hKUM5OK9Y5gPv3cf4NX:PmXjrVBR+rmz4F64W45Ob5Qv3cf2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F9B2BE173BE086E2C0BB1B7095B3D263A012BD66F53549BFD6C31A0B19A5504CD73F5A
sha3_384: 8e5f09979f9126c637ec65eb8679c9247c944ec500e851b00748eb22c6f787f1ecd1797a2b09ac34efb6475609ac7b3e
ep_bytes: 6a086850524000e89425000033f65656
timestamp: 2005-09-19 11:49:48


Version Info:

CompanyName: BitDefender
FileDescription: Gan
FileVersion: 3.0.79.4
InternalName: Gsn.exe
LegalCopyright: Copyright (C) 2011 Heaventools Software
OriginalFilename: Gusn.exe
ProductName: Gusno
ProductVersion: 3.0.79.4
Translation: 0x004b 0x04b0

Trojan.Generic.KDV.247902 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.KDV.247902
FireEyeGeneric.mg.037d6551006d17a6
ALYacTrojan.Generic.KDV.247902
CylanceUnsafe
ZillyaTrojan.FakeAV.Win32.88336
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/LockScreen.cc301603
K7GWTrojan ( 00274f891 )
K7AntiVirusTrojan ( 00274f891 )
VirITTrojan.Win32.SHeur3.CDZB
CyrenW32/Ransom.O.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/LockScreen.AGD
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Generic.KDV.247902
NANO-AntivirusTrojan.Win32.PornoAsset.djvvl
AvastWin32:Malware-gen
TencentWin32.Trojan.Pornoasset.Duz
Ad-AwareTrojan.Generic.KDV.247902
SophosML/PE-A + Mal/Behav-103
ComodoMalware@#30bkww5q84458
DrWebTrojan.Winlock.3445
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_KRYPTK.SM21
McAfee-GW-EditionBehavesLike.Win32.Dropper.mm
EmsisoftTrojan.Generic.KDV.247902 (B)
IkarusTrojan-Ransom.PornoAsset
GDataTrojan.Generic.KDV.247902
JiangminTrojan/PornoAsset.bi
WebrootW32.Rogue.Pornoasset.Gen
AviraTR/Ransom.PornoAsset.ua
MAXmalware (ai score=100)
Antiy-AVLTrojan/Generic.ASMalwS.A683C2
ViRobotTrojan.Win32.A.PornoAsset.24576.AC
MicrosoftRansom:Win32/Genasom
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.PornoAsset.R20667
McAfeeArtemis!037D6551006D
TACHYONTrojan/W32.PornoAsset.24576.F
VBA32BScope.Trojan.Winlock
TrendMicro-HouseCallTROJ_KRYPTK.SM21
RisingTrojan.Generic!8.C3 (CLOUD)
YandexTrojan.PornoAsset!Jw2p3Ml2UnY
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.2303241.susgen
FortinetW32/PornoAsset.UG!tr
BitDefenderThetaGen:NN.ZexaF.34114.bu0@aWauHUjc
AVGWin32:Malware-gen
Cybereasonmalicious.1006d1
PandaGeneric Malware

How to remove Trojan.Generic.KDV.247902?

Trojan.Generic.KDV.247902 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment