Trojan

Trojan.GenericPMF.S30332052 removal

Malware Removal

The Trojan.GenericPMF.S30332052 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.GenericPMF.S30332052 virus can do?

  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Behavioural detection: Injection with CreateRemoteThread in a remote process
  • Deletes executed files from disk
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.GenericPMF.S30332052?



File Info:

name: E071903E0FD56922E60C.mlw
path: /opt/CAPEv2/storage/binaries/b8cdcb614003e2afc203d6594de53d1507f08c81ae55c9e96c0c1ee5a142e7bc
crc32: 336CE7EA
md5: e071903e0fd56922e60c4a511859d359
sha1: 3e6ed45c102ff1ff45df803322bfe3aaa2cabe2d
sha256: b8cdcb614003e2afc203d6594de53d1507f08c81ae55c9e96c0c1ee5a142e7bc
sha512: 98299ea07c96c9ed34e8a54e5067a78f10c67f2da0f3b06feb3fe58a56e6206c91880baaab65b984ffebfdd541855941cc15ce3a6e8398e25fb3e00f56de6a0d
ssdeep: 1536:97EtvnKhWQtC3Izj6TrlDa2z6Ewd0zvPTQw9LBZRG8V3zhb:dEtvKztiIzj6xtDLBZRG8Vj5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BB937E00F6D584B0EC95367000E76BB7C1BA9DA1520B0BB36F64CE6B38B65B9BD35417
sha3_384: 601601f69926bc925e79619b25ae89f544359b0280a22a334a8528a581398330ea1d744a87ac8945de9d6b189a156407
ep_bytes: 558bec6aff689011151368dacf151364
timestamp: 2012-07-19 19:00:28


Version Info:

Comments: 1.5901.1.195
CompanyName: 网龙天晴数码
FileDescription: 网络游戏魔域客户端执行程序
FileVersion: 1, 5901, 1, 195
InternalName: soul.exe
LegalCopyright: 版权所有 (C) 2002
LegalTrademarks: 
OriginalFilename: 魔域.exe
PrivateBuild: 
ProductName: 魔域客户端执行程序
ProductVersion: 1, 0, 0, 1
SpecialBuild: 
Translation: 0x0804 0x04b0

Trojan.GenericPMF.S30332052 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Fugrafa.3207
ClamAVWin.Dropper.Gh0stRAT-7645027-0
FireEyeGeneric.mg.e071903e0fd56922
CAT-QuickHealTrojan.GenericPMF.S30332052
McAfeeGenericRXCF-DW!E071903E0FD5
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Fugrafa.3207
SangforSuspicious.Win32.Save.ins
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0047d1d01 )
K7AntiVirusTrojan ( 0047d1d01 )
VirITTrojan.Win32.Generic.OTW
CyrenW32/Injector.WVWM-2950
SymantecSMG.Heur!gen
Elasticmalicious (high confidence)
ESET-NOD32Win32/Farfli.AAG
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Dropper.Win32.Injector.pef
BitDefenderGen:Variant.Fugrafa.3207
NANO-AntivirusTrojan.Win32.DownLoad3.brmnhb
AvastWin32:Evo-gen [Trj]
EmsisoftGen:Variant.Fugrafa.3207 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.DownLoad3.17387
McAfee-GW-EditionBehavesLike.Win32.Shohdi.nt
Trapminemalicious.high.ml.score
SophosTroj/Farfli-DL
SentinelOneStatic AI – Suspicious PE
GDataWin32.Trojan.PSE.BIKVIZ
JiangminTrojan.Generic.aakuc
WebrootW32.Trojan.Gen
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=82)
Antiy-AVLTrojan/Win32.Farfli
XcitiumTrojWare.Win32.Farfli.S@6jgvla
ArcabitTrojan.Fugrafa.DC87
ZoneAlarmHEUR:Trojan-Dropper.Win32.Injector.pef
MicrosoftTrojan:Win32/OnLineGames.A
GoogleDetected
AhnLab-V3Trojan/Win32.Gen
BitDefenderThetaGen:NN.ZexaF.36348.fm0@aqyqiEgb
ALYacGen:Variant.Fugrafa.3207
VBA32BScope.Trojan.Download
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Farfli!8.FF (TFE:5:O5WCqxJcgWD)
YandexTrojan.GenAsa!HZb9oIoHoh0
IkarusTrojan-Spy.Win32.Small
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Farfli.AAG!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.e0fd56
DeepInstinctMALICIOUS

How to remove Trojan.GenericPMF.S30332052?

Trojan.GenericPMF.S30332052 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment