Trojan.GenericIH.S31125734 malicious file

The Trojan.GenericIH.S31125734 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.GenericIH.S31125734 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial binary language: Russian
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the embedded win api malware family
• Collects information to fingerprint the system
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.GenericIH.S31125734?

File Info:
name: 280201F9ADA65F8EF48F.mlw
path: /opt/CAPEv2/storage/binaries/e853843c8e55c0eee5d6cad361dbfc13f8c0e0cf8020dd898c9d83bf831e2a6b
crc32: 67B0FCD9
md5: 280201f9ada65f8ef48feb326faab1d3
sha1: 23c1067d3ed58f27bebac0fa88f291a6ea8b4593
sha256: e853843c8e55c0eee5d6cad361dbfc13f8c0e0cf8020dd898c9d83bf831e2a6b
sha512: 153d664e2ebb974c0b6611e29b03158ade78640efa745ba8ddd56e92ff7414da2246752c9efce2a5193e88d98fae0d9d51e5e206b654865d33580a4fd6c9b684
ssdeep: 6144:IHGsMQN05IsXU6POi7/aph0vJgH6NfNHfLmH6R:IHGumnH/+myO1lR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19324ADD666778C8AE91C357CE12D4677146B0CE0ADECAF5BA2AED9062E53CD10C8CD43
sha3_384: d6656539a1222734931c2799f1f46c8332f414e27828f75d4263ee9b4464e324bcf5d7adba215ae98b232354ee7678e5
ep_bytes: 558bec51ff1588224300689c0100006a
timestamp: 2013-04-15 17:40:05

Version Info:
CompanyName: Корпорация  Майкрософт
FileDescription: Редактор личных символов
Translation: 0x0419 0x04b0

Trojan.GenericIH.S31125734 also known as:

How to remove Trojan.GenericIH.S31125734?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.