Trojan.MauvaiseRI.S5242492 removal

The Trojan.MauvaiseRI.S5242492 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.MauvaiseRI.S5242492 virus can do?

Unconventionial language used in binary resources: Korean
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.MauvaiseRI.S5242492?


File Info:
name: 6CEAF448EEF33AD70A4A.mlw
path: /opt/CAPEv2/storage/binaries/70e68950d1b48afd5fc67102da83da701da2a3e5700242cd1786786442dcb9b6
crc32: 0BDFB0B2
md5: 6ceaf448eef33ad70a4a70e1465fa841
sha1: 459993447ad74f764dc0b2eeb049704034768943
sha256: 70e68950d1b48afd5fc67102da83da701da2a3e5700242cd1786786442dcb9b6
sha512: 88d51929b8e524245a8ac80263f19b2d841beac31eeb5f20eb1ae103e1ec38f5810c7872c1c72ab3f1eff07e742a8dc30359b438b629173375e2b1d6fadc252f
ssdeep: 98304:7ZkbYh7tQMv27ilzDRQpJ88MfsMzt9SkLW6T:VdhWMv2wFQPxgsMztRW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T150A67D14AE4941F1D54622786B56F32F25336256C77C2AC3E6626E170B74AE22C3E3FC
sha3_384: 5a0c346b42bdf462045dead81858fdca5dcff5ed85534d1f5f6d3ddcc64a3c713fa1131ce68ee609135d6a47465f00fc
ep_bytes: 5556ff3424c74424085f9baedee91c49
timestamp: 2011-10-19 12:16:42

Version Info:
FileDescription: TricksterClient
FileVersion: 0, 8, 4, 71
InternalName: TricksterClient
LegalCopyright: Copyright ⓒ 2002,2005
OriginalFilename: TricksterClient.exe
ProductName: TricksterClient
ProductVersion: 0, 8, 4, 71
Translation: 0x0412 0x04b0

Trojan.MauvaiseRI.S5242492 also known as:

Bkav	W32.AIDetectMalware
FireEye	Generic.mg.6ceaf448eef33ad7
CAT-QuickHeal	Trojan.MauvaiseRI.S5242492
McAfee	GenericRXEP-EF!6CEAF448EEF3
Malwarebytes	Malware.AI.2010008460
Zillya	Trojan.Onescan.Win32.410
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00561d681 )
K7GW	Trojan ( 00561d681 )
Cybereason	malicious.47ad74
BitDefenderTheta	Gen:NN.ZexaF.36662.@J0@aiWUNjhO
Elastic	malicious (high confidence)
APEX	Malicious
TACHYON	Trojan/W32.Agent.9489920
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Onescan.aex
Antiy-AVL	Trojan[FakeAV]/Win32.Onescan
Google	Detected
VBA32	Trojan.Click
TrendMicro-HouseCall	TROJ_GEN.R002H06E423
Tencent	Malware.Win32.Gencirc.10b5ee1b
Yandex	Trojan.GenAsa!BQf2X3btzqg
Ikarus	Trojan-FakeAV.Win32.Onescan
MaxSecure	Trojan.Malware.9604795.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Trojan.MauvaiseRI.S5242492?

Trojan.MauvaiseRI.S5242492 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X