Categories: Trojan

Trojan.GenericPMF.S19172544 removal guide

The Trojan.GenericPMF.S19172544 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.GenericPMF.S19172544 virus can do?

A file was accessed within the Public folder.
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Creates a copy of itself
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.GenericPMF.S19172544?


File Info:
name: 1DF6C74A53AA123F0826.mlwpath: /opt/CAPEv2/storage/binaries/af1ca9109edc24778d83fafc32a2a911a75867a460b5c283525c6bcffc8c06a0crc32: 9041B890md5: 1df6c74a53aa123f08260e0d068142ddsha1: 98ecfa2dc7c927139ed8dbc8c4e8c0162283f7cesha256: af1ca9109edc24778d83fafc32a2a911a75867a460b5c283525c6bcffc8c06a0sha512: d81b063d477e314beec3a2d65a02dc70c341d070ee7dcd1c0af4b1d7193dd6dbba3cc71309d43716bdf32f6b0cd6b4126ea670e0c2feb1c73cd4f815514edaa0ssdeep: 768:kS4sULWW4pX3lRrQiT9gSZXUJiSOQXRntXoSPtAKSoxoKV6VPwtUtH5W0aC+ik4:bPUg3lR8iT9XUJi6NhqKV2otUt8pCnFtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17B3301EB134A7C59DADBC93D4DE6655A43B0E50503D2D30FE52EE49A3DACE092D30B12sha3_384: d80a65b4dd2bd6d886b4d907ad0bbc6c394eb235d22206b2b18050a53f30bfdf831ccf93b8bc24f42da9ad6b86e5ef1aep_bytes: 60be001041008dbe0000ffff5783cdfftimestamp: 2002-01-02 21:50:18
Version Info:
0: [No Data]

Trojan.GenericPMF.S19172544 also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.Small.l2hr
DrWeb	Dialer.Webdial
MicroWorld-eScan	Dialer.Webdialer.F
ClamAV	Win.Trojan.Generic-9976144-0
CAT-QuickHeal	Trojan.GenericPMF.S19172544
ALYac	Dialer.Webdialer.F
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Dialer.Webdialer.F
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Dialer ( 00046bb31 )
Alibaba	Trojan:Win32/Dialer.256b1fbe
K7GW	Dialer ( 00046bb31 )
Cybereason	malicious.a53aa1
BitDefenderTheta	Gen:NN.ZexaF.36348.dmGfa0nHOnq
Cyren	W32/Dialer.S.gen!Eldorado
Symantec	Dialer.Generic
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Dialer.WebDial
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Scar.omgz
BitDefender	Dialer.Webdialer.F
NANO-Antivirus	Trojan.Win32.Webdial.crgopi
SUPERAntiSpyware	Heur.Agent/Gen-GalPic
Avast	Win32:Small-LJG [Trj]
Tencent	Trojan.Win32.Scar.he
Emsisoft	Dialer.Webdialer.F (B)
F-Secure	Dialer.DIAL/000019
Zillya	Dialer.WebDialer.Win32.47
TrendMicro	DIAL_RAS.HT
McAfee-GW-Edition	BehavesLike.Win32.Dialer.qc
FireEye	Generic.mg.1df6c74a53aa123f
Sophos	Dial/WebDial-A
SentinelOne	Static AI – Suspicious PE
GData	Dialer.Webdialer.F
Jiangmin	Trojan.Scar.txx
Webroot	Worm:Win32/Tedeos.A@mm
Avira	DIAL/000019
MAX	malware (ai score=60)
Antiy-AVL	GrayWare[Porn-Dialer]/Win32.WebDialer
Xcitium	ApplicUnwnt.Win32.PornDialer.Webdialer.DA@4n4flj
Arcabit	Dialer.Webdialer.F
ZoneAlarm	Trojan.Win32.Scar.omgz
Microsoft	Program:Win32/Vigram.A
Google	Detected
AhnLab-V3	Unwanted/Win32.Dialer.R101528
McAfee	GenericRXAA-AA!1DF6C74A53AA
VBA32	BScope.Trojan.Scar
Cylance	unsafe
Panda	Dialer.Gen
TrendMicro-HouseCall	DIAL_RAS.HT
Rising	Worm.Tedeos!8.5B48 (TFE:5:ZxtPSdMDPuN)
Ikarus	Dialer
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Webdialer.7ACD!tr
AVG	Win32:Small-LJG [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)