Should I remove “Trojan.GenericRI.S30222133”?

The Trojan.GenericRI.S30222133 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.GenericRI.S30222133 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.GenericRI.S30222133?


File Info:
name: 05D0CA94245615A78987.mlw
path: /opt/CAPEv2/storage/binaries/78f253c770e647ffb1651a4a3d04842c6fa597dfbe1708555460f312dbb8a939
crc32: 1EA172E5
md5: 05d0ca94245615a78987547c845b8958
sha1: 0cf5d8f464748f42afc7710496fec63c3808e64b
sha256: 78f253c770e647ffb1651a4a3d04842c6fa597dfbe1708555460f312dbb8a939
sha512: 55795a2a9725ec607cb5cb78b6e4246a2dfc6e01d98de8cc847c7a1acf07ea250e6f12534352bb6bbeffac7a9c08d3afcf28ecfbec06f226578d5a4489595344
ssdeep: 1536:bWGxs9kGdYk8wO4CnlS5wIhoba0JLx7GCC4I4PP6PcvPnyp3aOTotXQZ:CGfGdYSCnoSIhobv1GN86PcvgKOEtg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10184CA02432220A7D65434B5C05A7B8A06906FF93DA7E536FE157406FA72BCA4E335FE
sha3_384: a271438fdfadce6bda3e572fd131897544e89dfe109f57afdce916e53cf665cc3a42de7616691f0998eba26d7873b335
ep_bytes: 556aff6840d240008bc56804ac400064
timestamp: 2002-04-13 01:49:44

Version Info:
CompanyName: Adobe Systems Incorporated
FileDescription: Adobe Reader 8.0
FileVersion: 8.0.0.2006102300
LegalCopyright: Copyright 1984-2006 Adobe Systems Incorporated and its licensors. All rights reserved.
ProductName: Adobe Reader
ProductVersion: 8.0.0.2006102300
OriginalFilename: AcroRd32.exe
Translation: 0x0409 0x04e4

Trojan.GenericRI.S30222133 also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Convagent.o!c
DrWeb	Win32.HLLM.Klez.4
MicroWorld-eScan	Win32.Worm.Klez.DAR
FireEye	Generic.mg.05d0ca94245615a7
CAT-QuickHeal	Trojan.GenericRI.S30222133
ALYac	Win32.Worm.Klez.DAR
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Worm.Klez.Win32.1
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 0000409e1 )
Alibaba	Worm:Win32/fragment.3c2eeb8b
K7GW	Trojan ( 0000409e1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaF.36302.xu0@aC5jhgai
Cyren	W32/Klez.H@mm (corrupted)
Symantec	W32.Klez.H@mm
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Klez
APEX	Malicious
ClamAV	Win.Trojan.Elkern-2
Kaspersky	UDS:Trojan.Win32.GenericML.xnet
BitDefender	Win32.Worm.Klez.DAR
Avast	Win32:Injected-AZ
Tencent	Trojan.Win32.Klez.b
Emsisoft	Win32.Worm.Klez.DAR (B)
F-Secure	Malware.W32/Elkern.C
Baidu	Win32.Worm.Klez.b
VIPRE	Win32.Worm.Klez.DAR
TrendMicro	WORM_KLEZ.GEN
McAfee-GW-Edition	BehavesLike.Win32.Klez.fm
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
GData	Win32.Worm.Klez.H
Jiangmin	I-Worm/Klez.h
Google	Detected
Avira	W32/Elkern.C
MAX	malware (ai score=100)
Antiy-AVL	Worm[Email]/Win32.Klez.h
Arcabit	Win32.Worm.Klez.DAR
ZoneAlarm	UDS:Trojan.Win32.GenericML.xnet
Microsoft	Worm:Win32/Klez.H@mm
Cynet	Malicious (score: 100)
McAfee	W32/Klez.gen@MM
VBA32	MalwareScope.Worm.Klez.1
Cylance	unsafe
Panda	Generic Suspicious
Zoner	Worm.Win32.Klez.32858
TrendMicro-HouseCall	WORM_KLEZ.GEN
Rising	Worm.Klez!1.A1CB (CLASSIC)
Ikarus	Trojan.Win32.Crypt
MaxSecure	Worm.W32.Klez.h
Fortinet	W32/Wacatac.B!tr
AVG	Win32:Injected-AZ
DeepInstinct	MALICIOUS

How to remove Trojan.GenericRI.S30222133?

Trojan.GenericRI.S30222133 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X