Trojan

How to remove “Trojan.GenericPMF.S1625602”?

Malware Removal

The Trojan.GenericPMF.S1625602 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.GenericPMF.S1625602 virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.GenericPMF.S1625602?


File Info:

crc32: F3C93EC5
md5: 18530d48a4b8c79ed885ff99c5bac5e8
name: 18530D48A4B8C79ED885FF99C5BAC5E8.mlw
sha1: 260acce5eda548aa755fc50be33a1cde3638f3e7
sha256: 3235eb495ffc29c8ead0c1d12500fb2e80b97e2dc79239d9da6f8750d7d79817
sha512: 7ef164be9d24ce09b23b032ab00b2fdfc34dc10aec02bd93850ff2e9cec61cab0e13d1ea297064b9d1b240bf6a4ab591661c5ff072b2f786752e85e80150c075
ssdeep: 192:/KL3KP3E7nzTsx0ltdEBtS8iKWgFm5Tks5WInzJRio53HDTfjwqxXclyyM2OIT3:FP3E7Hh1GFNrEz3VHHsqxRc5
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: willmaster@willmaster.at
FileDescription: JAF x64 FiX
FileVersion: 1,0,0,0
CompanyName: Willmaster Inc.
Translation: 0x0000 0x0000

Trojan.GenericPMF.S1625602 also known as:

CynetMalicious (score: 100)
CAT-QuickHealTrojan.GenericPMF.S1625602
APEXMalicious
AvastFileRepMalware
TencentMalware.Win32.Gencirc.10b3d552
ComodoTrojWare.Win32.TrojanDropper.Agent.~ZCA@go3n
McAfee-GW-EditionBehavesLike.Win32.Dropper.lc
FireEyeGeneric.mg.18530d48a4b8c79e
JiangminTrojan/BAT.KillWin.a
Antiy-AVLTrojan/Generic.ASMalwS.1B8DD6
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
McAfeeRDN/Generic.grp
RisingTrojan.Win32.Agent.a (CLASSIC)
FortinetW32/KillWin.BQ!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan.GenericPMF.S1625602?

Trojan.GenericPMF.S1625602 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment