Trojan

What is “Trojan.MauvaiseRI.S5242706”?

Malware Removal

The Trojan.MauvaiseRI.S5242706 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.MauvaiseRI.S5242706 virus can do?

  • At least one process apparently crashed during execution
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • Authenticode signature is invalid

How to determine Trojan.MauvaiseRI.S5242706?


File Info:

name: F516B202CC5F9BECD723.mlw
path: /opt/CAPEv2/storage/binaries/4e18c38013e3988f793e4dab52d8786d285c901fd3c1fc5cfbad585ddbf6c663
crc32: 43138E8D
md5: f516b202cc5f9becd7234fb07d18723a
sha1: cd82a0a8f2b24de71608b398233d0f002be9cce3
sha256: 4e18c38013e3988f793e4dab52d8786d285c901fd3c1fc5cfbad585ddbf6c663
sha512: bcc49c3c2c92b736dffb64de0b85c8822650b496f1fbeaebaeec77a9d589af72a51311d2f9f3e0c7df4be145337c47c23e86e103a61187ad1346fb8bc4d9783a
ssdeep: 3072:lzJktbbENFvx0HPaeXseTbCbXRVr9j3f0gKvzCrsWdoXz1fm1noSCgcg8Z+6HSGg:lzJktb4NFWbcePCbXtGCYu1no+4y8yT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F144EF12560189A8F34D0B711E6AF8E50A89AD7E54E0F60FF57CBD3A28725A316F305F
sha3_384: 1d4e1287d2a0035211ab736f7e98e139d5fcae323fd3d301c59a4ee6c33c96b17ef64157274e56e0713e99767df0b8b1
ep_bytes: 568b35202040006a00e8f2feffff68f4
timestamp: 2012-04-28 19:33:15

Version Info:

0: [No Data]

Trojan.MauvaiseRI.S5242706 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Tipp.lwpO
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Kazy.54855
FireEyeGeneric.mg.f516b202cc5f9bec
CAT-QuickHealTrojan.MauvaiseRI.S5242706
ALYacGen:Variant.Kazy.54855
CylanceUnsafe
ZillyaTrojan.Generic.Win32.883134
SangforHacktool.Win32.Injector.AX
AlibabaVirTool:Win32/Injector.49860f64
Cybereasonmalicious.2cc5f9
VirITTrojan.Win32.Packed.BHFY
CyrenW32/Gimemo.C.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Spy.Zbot.AAQ
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Kazy.54855
NANO-AntivirusTrojan.Win32.Tipp.povhw
SUPERAntiSpywareTrojan.Agent/Gen-Gamarue
AvastWin32:Citadel [Trj]
TencentMalware.Win32.Gencirc.10b59566
Ad-AwareGen:Variant.Kazy.54855
SophosML/PE-A + Troj/Agent-VQC
ComodoTrojWare.Win32.TrojanDropper.Agent.SANS@4omkqe
DrWebTrojan.Packed.22462
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0CB922
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
EmsisoftGen:Variant.Kazy.54855 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/Tipp.sw
WebrootW32.Trojan.Ransom
AviraTR/Ransom.icmnra
eGambitUnsafe.AI_Score_81%
Antiy-AVLTrojan/Generic.ASMalwS.7AFB8
MicrosoftVirTool:Win32/Injector.AX
GridinsoftRansom.Win32.Zbot.sa
ArcabitTrojan.Kazy.DD647
ViRobotTrojan.Win32.A.Tipp.277031.B
GDataGen:Variant.Kazy.54855
AhnLab-V3Trojan/Win32.Tipp.R24479
McAfeePWS-Zbot.gen.ym
MAXmalware (ai score=99)
VBA32BScope.Trojan.Casur
MalwarebytesMalware.AI.4184280538
TrendMicro-HouseCallTROJ_GEN.R002C0CB922
RisingDownloader.Dofoil!8.322 (TFE:2:o1QVgJcGgfF)
YandexTrojan.GenAsa!THJqFRsNahM
TACHYONTrojan/W32.Tipp.277031.B
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Tipp.PGH!tr
BitDefenderThetaGen:NN.ZexaF.34212.quZ@a8bSxXmc
AVGWin32:Citadel [Trj]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan.MauvaiseRI.S5242706?

Trojan.MauvaiseRI.S5242706 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment