Categories: Trojan

Trojan.GenericFC.S18288008 (file analysis)

The Trojan.GenericFC.S18288008 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.GenericFC.S18288008 virus can do?

  • Detected script timer window indicative of sleep style evasion
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Attempts to interact with an Alternate Data Stream (ADS)

How to determine Trojan.GenericFC.S18288008?


File Info:

crc32: 6C2BDB18md5: 58f7e4e264a16929101482f715e3102fname: 58F7E4E264A16929101482F715E3102F.mlwsha1: d1d5e76ca36934ecadc9f1eaadd6db655373e5bcsha256: 75ea1220430a1db49377668f5fc4f38d4bde275076a4619ba41d1d54a62bc9b8sha512: 9df71703998123c7dd8dfa9d8a51f45d030f9464faacaf787ec17426e4fd919123c6439eba0ba5c34282fb65502bc31e4b4d168b2bdcd62c6150051afd30495essdeep: 12288:0Qnk3GDYKGcblwtX+t4Y82gndj+Jy+hP/0erOff1qnt:IAOcZwXYKndj+JVGd+ttype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.GenericFC.S18288008 also known as:

Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
CAT-QuickHeal Trojan.GenericFC.S18288008
McAfee Artemis!58F7E4E264A1
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.Win32.Generic.4!c
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 00569e9c1 )
BitDefender Trojan.Uztuby.17
K7GW Trojan ( 00569e9c1 )
Cybereason malicious.264a16
Arcabit Trojan.Generic.D11D98
Cyren W32/MSIL_Troj.AGC.gen!Eldorado
Symantec Trojan.Gen.MBT
APEX Malicious
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win32.Generic
Alibaba Trojan:MSIL/Generic.6d8bf314
MicroWorld-eScan Trojan.Uztuby.17
Rising Spyware.Agent!8.C6 (CLOUD)
Ad-Aware Trojan.GenericKDZ.73112
Emsisoft Trojan.Uztuby.17 (B)
F-Secure Heuristic.HEUR/AGEN.1139433
DrWeb BackDoor.SpyBotNET.28
TrendMicro TROJ_GEN.R002C0PBR21
McAfee-GW-Edition BehavesLike.Win32.Backdoor.jh
MaxSecure Win.MxResIcn.Heur.Gen
FireEye Generic.mg.58f7e4e264a16929
Sophos Mal/Generic-S
Ikarus Trojan-Spy.Agent
Avira HEUR/AGEN.1139433
MAX malware (ai score=89)
Gridinsoft Trojan.Win32.Agent.sd!ni
Microsoft Trojan:Script/Phonzy.A!ml
ZoneAlarm HEUR:Trojan.Win32.Generic
GData Trojan.GenericKDZ.73112 (2x)
ALYac Trojan.GenericKDZ.73112
Malwarebytes Simbot.Backdoor.Stealer.DDS
ESET-NOD32 a variant of MSIL/Spy.Agent.AES
TrendMicro-HouseCall TROJ_GEN.R002C0PBR21
Tencent Win32.Trojan.Generic.Szlv
SentinelOne Static AI – Malicious SFX
Fortinet W32/Uztuby.17!tr
BitDefenderTheta Gen:NN.ZemsilF.34590.wq0@amzrIqfi
AVG Win32:RATX-gen [Trj]
Avast Win32:RATX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Win32/Backdoor.Uztuby.HwYDj04A

How to remove Trojan.GenericFC.S18288008?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Worm.AutorunVMF.S21201970 (file analysis)

The Worm.AutorunVMF.S21201970 is considered dangerous by lots of security experts. When this infection is active,…

27 mins ago

Zusy.496207 malicious file

The Zusy.496207 is considered dangerous by lots of security experts. When this infection is active,…

32 mins ago

How to remove “Malware.AI.1961790083”?

The Malware.AI.1961790083 is considered dangerous by lots of security experts. When this infection is active,…

37 mins ago

Win32.Worm.Viking.NCO removal guide

The Win32.Worm.Viking.NCO is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Symmi.3957 removal

The Symmi.3957 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Generic.Dacic.304514EE.A.8008A8E4 removal tips

The Generic.Dacic.304514EE.A.8008A8E4 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago