Categories: Trojan

Trojan.GenericPMF.S17403589 removal instruction

The Trojan.GenericPMF.S17403589 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.GenericPMF.S17403589 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
Presents an Authenticode digital signature
Creates RWX memory
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Enumerates running processes
Reads data out of its own binary image
A process created a hidden window
Uses Windows utilities for basic functionality
Uses Windows utilities for basic functionality
Attempts to modify proxy settings

How to determine Trojan.GenericPMF.S17403589?


File Info:
name: 8C4472FAE67EBC7D76CC.mlwpath: /opt/CAPEv2/storage/binaries/ba611cebf9a14c568929bd4f5c7ff3944719810bc9c5f67dd4d5d3a41bb5e8c7crc32: 103105F8md5: 8c4472fae67ebc7d76cc9e4131a2c271sha1: 18f07b6f4ed469bedeec5618a09d3976fa2f526asha256: ba611cebf9a14c568929bd4f5c7ff3944719810bc9c5f67dd4d5d3a41bb5e8c7sha512: 1dd4ef206aa57d3a0a4bb85294073d56e48f0e29d38349ff944a4072901319680896b85573281e99db2001cf5f45ea7dcb073e6350f19f5e131404081b88e1c6ssdeep: 49152:VZgu8rAi+3USz3h1/XBkThdTlpSuxQxN9dT4S9:VGIjR1Oh0Ttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18B859E92B7428031E55104731079DA2FC03A67749352A9F7879C3EB68A35AC2FA3DF76sha3_384: f6f6e0b35999d672dea972fee107449d53a8cd0b55cf236a2004f79c2e64f8930cafe16e6b940408791da00e04c7c73fep_bytes: e860d80000e97ffeffffcc57568b7424timestamp: 2019-11-13 08:34:35
Version Info:
CompanyName: Casino.comFileDescription: Casino.comFileVersion: 1.1.1.35InternalName: InstallerLegalCopyright: Copyright 2014OriginalFilename: installer.exeProductName: Casino.comProductVersion: 1.1.1.35Translation: 0x0409 0x04b0

Trojan.GenericPMF.S17403589 also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.8c4472fae67ebc7d
CAT-QuickHeal	Trojan.GenericPMF.S17403589
McAfee	Playtech
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 005295061 )
K7GW	Adware ( 005295061 )
Cyren	W32/Trojan.DOG.gen!Eldorado
ESET-NOD32	a variant of Win32/PlayTech.A potentially unwanted
NANO-Antivirus	Trojan.Win32.Crossrider1.hfhymh
SUPERAntiSpyware	PUP.PlayTech/Variant
Avast	FileRepMalware [PUP]
Tencent	Trojan.Win32.BitCoinMiner.la
Sophos	Generic ML PUA (PUA)
Comodo	Application.Win32.Playtech.DS@8m1bft
DrWeb	Trojan.Crossrider1.63459
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Playtech.th
SentinelOne	Static AI – Malicious PE
Emsisoft	Application.Downloader (A)
APEX	Malicious
Avira	ADWARE/Crossrider.onkgy
Antiy-AVL	Trojan/Generic.ASBOL.C606
Microsoft	PUA:Win32/Vigua.A
ViRobot	Adware.Playtech.1719672.UUZ
Cynet	Malicious (score: 99)
AhnLab-V3	PUP/Win32.Playtech.R300843
VBA32	Trojan.Crossrider
Malwarebytes	PUP.Optional.PlayTech
Rising	PUF.PlayTech!1.B89C (CLASSIC)
Yandex	Trojan.GenAsa!2VV7pmcwLXI
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	Riskware/PlayTech.FC71
AVG	FileRepMalware [PUP]
CrowdStrike	win/malicious_confidence_100% (D)