Trojan

Should I remove “Trojan.MFC.S20327808”?

Malware Removal

The Trojan.MFC.S20327808 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.MFC.S20327808 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.MFC.S20327808?


File Info:

crc32: 1CF9A34D
md5: 715d5fb6c20422426649725ab4cdf434
name: 715D5FB6C20422426649725AB4CDF434.mlw
sha1: 0dbac4cd3cf53b78988f46cc040dc2aaa2de942f
sha256: adb7849f0e0c94ad25bf75cf12ef1f5280f9453fd04dddd8c86b1317b95a6280
sha512: b896d43b3712a2f4fed4404f50325e0a3c593e887ebe87cf25ea9b93e422261e4746476baeab5be449e4a14b47bdb797e921cb8c13c33393dad0f70c8d919729
ssdeep: 384:9Am2tewu9L2F/iN5DqtC3d3OOPOa9S7TS6/RWBLhBeEIcakLG99QYWHpW:9et4OO5D9tZGt7TJRWBV4cakLG99I
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: MSPAINT
FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.3.9600.17415
FileDescription: Paint
OriginalFilename: MSPAINT.EXE
Translation: 0x0409 0x04b0

Trojan.MFC.S20327808 also known as:

K7AntiVirusTrojan-Downloader ( 0057811c1 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.29934
MicroWorld-eScanTrojan.GenericKD.36510190
CAT-QuickHealTrojan.MFC.S20327808
ALYacTrojan.GenericKD.36510190
MalwarebytesTrojan.Downloader.MSIL.Generic
ZillyaDownloader.Small.Win32.137727
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:MSIL/Stealer.a3f30d7f
K7GWTrojan-Downloader ( 0057811c1 )
Cybereasonmalicious.6c2042
CyrenW32/Trojan.QCHF-2081
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.HON
APEXMalicious
AvastWin32:RATX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefenderTrojan.GenericKD.36510190
NANO-AntivirusTrojan.Win32.Stealer.ipjgll
TencentMalware.Win32.Gencirc.11baf9ed
Ad-AwareTrojan.GenericKD.36510190
SophosMal/Generic-S
ComodoMalware@#1zci6dr9bhqyi
BitDefenderThetaGen:NN.ZemsilF.34266.Gn3@amksEAhi
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PKE21
McAfee-GW-EditionPWS-FCXH!715D5FB6C204
FireEyeGeneric.mg.715d5fb6c2042242
EmsisoftTrojan.GenericKD.36510190 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.MSIL.bhne
WebrootW32.Trojan.Gen
AviraTR/Dropper.MSIL.Gen
eGambitUnsafe.AI_Score_91%
Antiy-AVLTrojan[Spy]/MSIL.Stealer
MicrosoftTrojan:Win32/Skeeyah!MSR
GDataTrojan.GenericKD.36510190
AhnLab-V3Trojan/Win.Generic.C4372248
McAfeePWS-FCXH!715D5FB6C204
MAXmalware (ai score=84)
VBA32TScope.Trojan.MSIL
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0PKE21
YandexTrojan.DL.Small!dFFGtJl/NIo
IkarusTrojan-Downloader.MSIL.Small
MaxSecureTrojan.Malware.73709669.susgen
FortinetMSIL/Small.CKP!tr.dldr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.MFC.S20327808?

Trojan.MFC.S20327808 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment