Trojan

Trojan.Lethic.Gen.11 removal

Malware Removal

The Trojan.Lethic.Gen.11 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Lethic.Gen.11 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Creates a slightly modified copy of itself
  • Collects information to fingerprint the system

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Lethic.Gen.11?


File Info:

crc32: 387D219B
md5: cf90ff4f14d4e89c48f886a2d89286e1
name: CF90FF4F14D4E89C48F886A2D89286E1.mlw
sha1: 62740bb0a0357ece28842ee92f499411297ede7f
sha256: f2fc8275f21e73e6a27ececec32d828db56aaf12592542bdb513154e37a30a01
sha512: f97042c37e5f4562da4c3375a5c0b3be40bc8a541085b81d6f5032112dac34f385652bea0e0bce0086a9805c873e4397473b66329471a827b7186cbfcc732f24
ssdeep: 3072:gbFZBpiJrsZnWbPOq1BxsoHqiT58JlrUSEJH/86DVJAknokab:gbF3pSw85DxsoKrlrPE3T1ab
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileDescription: x420x435x434x430x43ax442x43ex440 x43bx438x447x43dx44bx445 x441x438x43cx432x43ex43bx43ex432
CompanyName: x41ax43ex440x43fx43ex440x430x446x438x44f x41cx430x439x43ax440x43ex441x43ex444x442
Translation: 0x0419 0x04b0

Trojan.Lethic.Gen.11 also known as:

BkavHW32.Packed.
K7AntiVirusTrojan ( 0040fa341 )
DrWebTrojan.Mods.1
MicroWorld-eScanTrojan.Lethic.Gen.11
CMCTrojan.Win32.ShipUp!O
ALYacTrojan.Lethic.Gen.11
CylanceUnsafe
ZillyaTrojan.ShipUp.Win32.2173
SangforMalware
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDropper:Win32/ShipUp.05414654
K7GWTrojan ( 0040fa341 )
Cybereasonmalicious.f14d4e
TrendMicroTROJ_SPNR.3636HL13
BaiduWin32.Trojan.Kryptik.ac
CyrenW32/Trojan.QUPD-0811
ESET-NOD32a variant of Win32/Kryptik.BIDA
APEXMalicious
AvastWin32:Kryptik-MRR [Trj]
ClamAVWin.Packed.Shipup-6718719-0
GDataTrojan.Lethic.Gen.11
KasperskyTrojan.Win32.ShipUp.ebhf
BitDefenderTrojan.Lethic.Gen.11
NANO-AntivirusTrojan.Win32.ShipUp.crvlvt
ViRobotTrojan.Win32.Z.Kryptik.184192.AZ
TencentMalware.Win32.Gencirc.10b49656
Ad-AwareTrojan.Lethic.Gen.11
SophosMal/ZAccess-CG
ComodoTrojWare.Win32.Kryptik.BHWB@50ugd2
F-SecureTrojan.TR/Crypt.XPACK.Gen
BitDefenderThetaGen:NN.ZexaF.34110.ly1@aOZa9kdc
VIPRETrojan.Win32.ZAccess.ma (v)
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.cc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.cf90ff4f14d4e89c
EmsisoftTrojan.Lethic.Gen.11 (B)
SentinelOneDFI – Malicious PE
F-ProtW32/Trojan3.ANMQ
Endgamemalicious (high confidence)
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_67%
Antiy-AVLTrojan/Win32.ShipUp
MicrosoftTrojanDropper:Win32/Gepys.A
JiangminTrojan/ShipUp.uv
ArcabitTrojan.Lethic.Gen.11
AegisLabTrojan.Win32.Generic.lw2L
ZoneAlarmTrojan.Win32.ShipUp.ebhf
TACHYONTrojan/W32.ShipUp.184192
AhnLab-V3Trojan/Win32.Zbot.R64039
Acronissuspicious
McAfeePacked-AM!CF90FF4F14D4
MAXmalware (ai score=87)
VBA32Trojan.ShipUp
MalwarebytesTrojan.Dropper
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_SPNR.3636HL13
RisingTrojan.Kryptik!1.A949 (CLASSIC)
YandexTrojan.ShipUp!PbYF1eYrolg
IkarusTrojan.Win32.ShipUp
MaxSecureTrojan.ShipUp.gen
FortinetW32/Kryptik.BJBC!tr
AVGWin32:Kryptik-MRR [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.e35

How to remove Trojan.Lethic.Gen.11?

Trojan.Lethic.Gen.11 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment