Trojan

Trojan.GenericPMF.S32120177 removal

Malware Removal

The Trojan.GenericPMF.S32120177 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.GenericPMF.S32120177 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Deletes executed files from disk

How to determine Trojan.GenericPMF.S32120177?


File Info:

name: 8F1B6C15AF9C58E8BAA2.mlw
path: /opt/CAPEv2/storage/binaries/0152e2b4a39297a41b5daa58a4deea26fbcae4f2d96387f0ee2a058a3b823929
crc32: 6E0DE742
md5: 8f1b6c15af9c58e8baa2a2a97f02c1cb
sha1: 1f332f44c50531e39ff5ec92a9864cdb76645ee9
sha256: 0152e2b4a39297a41b5daa58a4deea26fbcae4f2d96387f0ee2a058a3b823929
sha512: c1942d60d1bf7900b72ed97f977b49e9e9d758fed6c46756775ad29dfc4d1c54b7269678cb7de2b8bd02c46919c4f8501c7ef79c79203ae30d737a32c7e88e96
ssdeep: 192:K3Apk98m4e0/IDJh/5ZQcvoyne4t/PQ3Pw1C0SluWbiWBNEckxC/U0Sq6W:eApc8m4e0GvQak4JI341C0abnkIU0Sqb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12DC2A72679A08639C732C77044BF78D01DB27E0DA945884EC6437AB4DCB27D2EA6DB0D
sha3_384: 0fd6178bb90fd0ec1f788a1b580a775a5b5fa6421642d91b2348f11e6a7436e529b7ae339dbcbef226767c50c2053d74
ep_bytes: 558bec6aff6888204000685018400064
timestamp: 2006-07-02 14:19:05

Version Info:

0: [No Data]

Trojan.GenericPMF.S32120177 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.Heur.bqX@H9kNqkgb
ClamAVWin.Downloader.20341-1
CAT-QuickHealTrojan.GenericPMF.S32120177
SkyhighBehavesLike.Win32.Generic.mt
ALYacGen:Trojan.Heur.bqX@H9kNqkgb
MalwarebytesAgent.Trojan.Dropper.DDS
ZillyaDownloader.Loan.Win32.2
SangforSuspicious.Win32.Save.ins
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.38EF9FA71C
VirITTrojan.Win32.Loan.A
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SOI
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Downloader.Win32.Loan.a
BitDefenderGen:Trojan.Heur.bqX@H9kNqkgb
NANO-AntivirusTrojan.Win32.Loan.wswt
AvastWin32:Malware-gen
TencentTrojan-DL.Win32.Loan.ha
EmsisoftGen:Trojan.Heur.bqX@H9kNqkgb (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebTrojan.Sdter.40
VIPREGen:Trojan.Heur.bqX@H9kNqkgb
TrendMicroTROJ_GEN.R03BC0CBG24
FireEyeGeneric.mg.8f1b6c15af9c58e8
SophosTroj/Loan-A
IkarusTrojan-Downloader.Win32.Loan
JiangminTrojanDownloader.Loan.h
VaristW32/Downloader.ULNT-8355
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Downloader]/Win32.Loan
Kingsoftmalware.kb.a.961
MicrosoftTrojanDownloader:Win32/Loan.BG!MTB
XcitiumTrojWare.Win32.Downloader.Loan.~A@5eal0
ArcabitTrojan.Heur.EBA6DF
ViRobotTrojan.Win32.Downloader.2356269
ZoneAlarmTrojan-Downloader.Win32.Loan.a
GDataWin32.Trojan.PSE.Z2FDMT
GoogleDetected
AhnLab-V3Trojan/Win32.OnlineGameHack.R48689
McAfeeGenericRXDN-CE!8F1B6C15AF9C
MAXmalware (ai score=87)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0CBG24
RisingDropper.Agent!1.E3CA (CLASSIC)
YandexTrojan.DL.Loan!A70NC6M03ss
SentinelOneStatic AI – Suspicious PE
MaxSecureDownloader.W32.Loan.a
FortinetW32/Generic.AC.25CAAE!tr
AVGWin32:Malware-gen
Cybereasonmalicious.4c5053
DeepInstinctMALICIOUS

How to remove Trojan.GenericPMF.S32120177?

Trojan.GenericPMF.S32120177 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment