Trojan

How to remove “Trojan.GenericPMF.S210608”?

Malware Removal

The Trojan.GenericPMF.S210608 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.GenericPMF.S210608 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.GenericPMF.S210608?


File Info:

name: 6A84FCD555D3E82C0816.mlw
path: /opt/CAPEv2/storage/binaries/42a25f6ee7af8a0731e8285a5fe3da3ad19ff13463a01fba12992054e16873a0
crc32: 63674D2D
md5: 6a84fcd555d3e82c0816b2a0eef062f9
sha1: 2c88a81f098103cd3ed1f1b4027549aa525b91f1
sha256: 42a25f6ee7af8a0731e8285a5fe3da3ad19ff13463a01fba12992054e16873a0
sha512: 2067c5440392e6ad23528df1db4a8ac89bdde6db08f1143b70ecf9211d24da9f63c54ee54bca8e96756c438bbce81308374cb05c9b9f12078459adbed5156165
ssdeep: 768:ZKt0yVuYdMVgQ+mpT+R1Ou/lQNmp+jsTaXD1A:ZG1VlK+yT4b/Fp+weXD1A
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16AD2D0060954D527CA96E13550DA650F228CDCA364AA3ECB77E9772EF7CBA74CC03287
sha3_384: ff57d7da09d4ab19b818c3030cfe95feb53498847af5eced5bf15415817884e1227568532eeb4d38a6e83b9776c096b1
ep_bytes: 60be000041008dbe0010ffff5783cdff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan.GenericPMF.S210608 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (moderate confidence)
CAT-QuickHealTrojan.GenericPMF.S210608
CylanceUnsafe
APEXMalicious
McAfee-GW-EditionArtemis
Trapminesuspicious.low.ml.score
SophosCrackTool (PUA)
WebrootW32.Trojan.Gen
McAfeeArtemis!6A84FCD555D3
VBA32BScope.Trojan.Wacatac
MalwarebytesMalware.Heuristic.1003
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.GenericPMF.S210608?

Trojan.GenericPMF.S210608 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment