Trojan.GenericPMF.S2873331 removal

The Trojan.GenericPMF.S2873331 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.GenericPMF.S2873331 virus can do?

Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.GenericPMF.S2873331?


File Info:
name: 6F599AD7C622E6D479F6.mlw
path: /opt/CAPEv2/storage/binaries/01a654250217a3c5d5f8141a3de04c6bf7eae2729acf8298d14ee7be103e87f0
crc32: 852C6AE4
md5: 6f599ad7c622e6d479f606f7166a3650
sha1: 7f862ef7b6ff4e84836f0faae74cca2974d5e3b7
sha256: 01a654250217a3c5d5f8141a3de04c6bf7eae2729acf8298d14ee7be103e87f0
sha512: 9165ab756400f41313f3aeee7598e30af1d93a35fcf2f1ff5913e5078a4169095fb418e1955a1057a604a2c9c687474368222f17b3c72d5e5bcfc509ca7c1460
ssdeep: 12288:9WYqnwTrEp888888888888W88888888888obnwqnVmaL/K93V+nk9voKFUQK:sYqwTYsnwemaWVb9AK5K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T136D4F103B7C70C71F56E09B89CA59148FC2BBA381EE1602A7DF4CE0E44BD2D65C796A5
sha3_384: d9e9aa03d7fed5e7f919b8392c8313bb2d80b013898500fe687926a1744bb15626db1362f17d8c327289b00a6e623657
ep_bytes: 558becb9080000006a006a004975f953
timestamp: 2013-10-31 10:13:11

Version Info:
CompanyName: IObit
FileDescription: Driver Backup Package
FileVersion: 1.1.0.0
InternalName: UpdateDB
LegalCopyright: Copyright© 2013 IObit. All Rights Reserved.
LegalTrademarks: IObit
OriginalFilename: SfxStub.exe
ProductName: Driver Booster
ProductVersion: 1.1.0.0
Comments: Driver Database Updater
Translation: 0x0409 0x04e4

Trojan.GenericPMF.S2873331 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.GenericKD.48958275
FireEye	Trojan.GenericKD.48958275
CAT-QuickHeal	Trojan.GenericPMF.S2873331
ALYac	Trojan.GenericKD.48958275
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	AI:Packer.759C860817
Cyren	W32/Jacard.A.gen!Eldorado
APEX	Malicious
ClamAV	Win.Dropper.Genericrxjd-9884871-0
BitDefender	Trojan.GenericKD.48958275
Avast	FileRepMalware [Misc]
Emsisoft	Trojan.GenericKD.48958275 (B)
VIPRE	Trojan.GenericKD.48958275
McAfee-GW-Edition	BehavesLike.Win32.Dropper.hc
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.Yarwi
GData	Trojan.GenericKD.48958275
Jiangmin	Packed.Dico.dxt
Google	Detected
MAX	malware (ai score=86)
Arcabit	Trojan.Generic.D2EB0B43
Cynet	Malicious (score: 100)
McAfee	Artemis!6F599AD7C622
VBA32	Trojan.Wacatac
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:EHFDp2kbBKvmoyNa2Wv7kg)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.YARW!tr
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS

How to remove Trojan.GenericPMF.S2873331?

Trojan.GenericPMF.S2873331 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X