Trojan.GenericFC.S30155698 removal

The Trojan.GenericFC.S30155698 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.GenericFC.S30155698 virus can do?

Authenticode signature is invalid
CAPE detected the XWorm malware family

How to determine Trojan.GenericFC.S30155698?


File Info:
name: B4AD436161DEB40E8D23.mlw
path: /opt/CAPEv2/storage/binaries/96f1ed847e5dd79ec16140b7a60279b2c921e53f48430a96227be157f492c0d2
crc32: 648E429D
md5: b4ad436161deb40e8d2302e3c061a582
sha1: 9d00e6dede722c4fc21a7335c2e73d2a70c2cef2
sha256: 96f1ed847e5dd79ec16140b7a60279b2c921e53f48430a96227be157f492c0d2
sha512: 47612ae0c2bd72f5961c39a4f6b21b0196536a822ac01ee1c4ac8ad8e663e61436ceda5dc290b1f3be5b766ce3dce41b842c2469a2d247cc122cb21fd96e0d09
ssdeep: 768:Yecbl/b37gMYAoRFNk2uBFE9RYvOqhFbq:Hcx6Nk24FE9RYvOqn+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T197D23B483BE84327D6FE2FB229B2A10103759507D923EF5F5CD885A7AF67B8146013E6
sha3_384: 775f19abf608110058003058d3c39e85cd2582852e2db01948a373dd3c62cf2e4a8cf9c594cc0aeed5c0312da938e3b2
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-08-04 09:11:21

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.0.0
InternalName: XClient.exe
LegalCopyright:  
OriginalFilename: XClient.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan.GenericFC.S30155698 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.GenericFC.S30155698
ALYac	IL:Trojan.MSILZilla.25346
Cylance	unsafe
Zillya	Trojan.Agent.Win32.3231769
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 00592e8b1 )
K7AntiVirus	Trojan ( 00592e8b1 )
BitDefenderTheta	Gen:NN.ZemsilF.36348.bm0@aOR@mqo
VirIT	Trojan.Win32.Genus.RRS
Cyren	W32/MSIL_Agent.BUD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.DWN
APEX	Malicious
ClamAV	Win.Packed.njRAT-10002074-1
Kaspersky	HEUR:Trojan.MSIL.PowerShell.gen
BitDefender	IL:Trojan.MSILZilla.25346
MicroWorld-eScan	IL:Trojan.MSILZilla.25346
Avast	Win32:InjectorX-gen [Trj]
Rising	Backdoor.XWorm!1.E338 (CLASSIC)
TACHYON	Trojan/W32.DN-PowerShell.30720
Emsisoft	IL:Trojan.MSILZilla.25346 (B)
DrWeb	Trojan.PWS.Stealer.35765
VIPRE	IL:Trojan.MSILZilla.25346
McAfee-GW-Edition	BehavesLike.Win32.Generic.nm
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.b4ad436161deb40e
Sophos	Troj/Agent-BJXT
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/MSIL.PowerShell
Microsoft	Trojan:MSIL/XWorm.C!MTB
Arcabit	IL:Trojan.MSILZilla.D6302
ZoneAlarm	HEUR:Trojan.MSIL.PowerShell.gen
GData	MSIL.Backdoor.XWormRAT.B
Google	Detected
AhnLab-V3	Backdoor/Win.AsyncRat.C5366153
Acronis	suspicious
McAfee	GenericRXWB-PG!B4AD436161DE
MAX	malware (ai score=80)
VBA32	Backdoor.MSIL.XWorm.gen
Malwarebytes	Generic.Malware.AI.DDS
Tencent	Trojan.Msil.Blocker.16000561
Ikarus	Trojan.MSIL.XWorm
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.DWN!tr
AVG	Win32:InjectorX-gen [Trj]
Cybereason	malicious.ede722
DeepInstinct	MALICIOUS

How to remove Trojan.GenericFC.S30155698?

Trojan.GenericFC.S30155698 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X