How to remove “Trojan.Generic.TRFH92”?

The Trojan.Generic.TRFH92 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.TRFH92 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan.Generic.TRFH92?


File Info:
name: 7B9D5A2DF383015E44EF.mlw
path: /opt/CAPEv2/storage/binaries/1aceff298013fa509e43b79eca5a7653cc9b72c9dd87ab0b4c9abef208f29d02
crc32: 3B7FA7E5
md5: 7b9d5a2df383015e44efdab5d7a69cc9
sha1: 53e2fe3e162ad16da2c23d826628000b359fe611
sha256: 1aceff298013fa509e43b79eca5a7653cc9b72c9dd87ab0b4c9abef208f29d02
sha512: 4996b1734ffbc2e4cd01c4873096350e739ccbd5ff7dfbb67472e71c0baa7bd8cd33d7dbbe9d2b7db3d54fc82540c1e348fac4341b0898166d8d2297d403e7e9
ssdeep: 1536:Mctq4xVgeDrKlBetlDKyOCCBgcssqMK679j2g/DBaQgh506H+Jrt9Pd:Mctq4xVgeDrKlBetlDKyOCCBgcssqMKM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12163CF4F9378C3A4C3980A386FB261620177BF13F8E1FB194DE7115599A26C42CE23A7
sha3_384: e48081e0068441eb9a3a80f0319106618fac0cea3c53c352b3c83e21a615b155ada41b4cb07a193f8cb09c16ddd6b64a
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-16 12:43:08

Version Info:
Translation: 0x0000 0x04b0
CompanyName: Nishant Sivakumar
FileDescription: TypeDescriptionProviderDemo
FileVersion: 5.66.0.7716
InternalName: asd.exe
LegalCopyright: Copyright ©  2008
OriginalFilename: asd.exe
ProductName: TypeDescriptionProviderDemo
ProductVersion: 5.66.0.7716
Assembly Version: 0.0.0.0

Trojan.Generic.TRFH92 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.700106
FireEye	Generic.mg.7b9d5a2df383015e
CAT-QuickHeal	Trojan.Generic.TRFH92
McAfee	PWS-FCRS!7B9D5A2DF383
K7AntiVirus	Trojan ( 005656cb1 )
BitDefender	Gen:Variant.Razy.700106
K7GW	Trojan ( 005656cb1 )
Cybereason	malicious.df3830
BitDefenderTheta	Gen:NN.ZemsilF.34182.em0@aed4EHd
Cyren	W32/MSIL_Kryptik.COR.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.XBC
ClamAV	Win.Packed.Razy-9863149-0
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
Alibaba	Backdoor:MSIL/Bladabindi.b7b0b3bf
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL:TrXxvH9YPPp/LaRcFGj2WA)
Emsisoft	Trojan-Spy.Agent (A)
DrWeb	Trojan.DownLoader33.58755
McAfee-GW-Edition	BehavesLike.Win32.Generic.kc
SentinelOne	Static AI – Malicious PE
Sophos	ML/PE-A
APEX	Malicious
Avira	TR/Dropper.MSIL.Gen
MAX	malware (ai score=82)
Microsoft	Backdoor:MSIL/Bladabindi.RKC!MTB
GData	Gen:Variant.Razy.700106
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Korat.R341547
ALYac	Gen:Variant.Razy.700106
Malwarebytes	Trojan.MalPack
Ikarus	Trojan.MSIL.Krypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/CoinMiner.ESXT!tr
AVG	Win32:RATX-gen [Trj]
Avast	Win32:RATX-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Trojan.Generic.TRFH92?

Trojan.Generic.TRFH92 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X