Trojan

Trojan.Multi.GenAutorunTaskFile.a malicious file

Malware Removal

The Trojan.Multi.GenAutorunTaskFile.a is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Multi.GenAutorunTaskFile.a virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan.Multi.GenAutorunTaskFile.a?


File Info:

name: DBC8BE099052B49D90BB.mlw
path: /opt/CAPEv2/storage/binaries/c1da862e66e46d26957bee144c1a1e46b012286837c18c74cbdb5e93fc077b71
crc32: 466CB6D0
md5: dbc8be099052b49d90bbdebb3c055c49
sha1: afa8c49ad54cc625364e27258948d389e0fdd5ab
sha256: c1da862e66e46d26957bee144c1a1e46b012286837c18c74cbdb5e93fc077b71
sha512: 2f3ea9acc4825e6301545785d8037bb070375f85f366c1a890e03a810dbd6c3342245a04da7c4ba0a18ce10c7cd25f45cbf839d3ad4c2a358433b92282a0f535
ssdeep: 196608:H8PKAE1K33r/ZV8mvzIPndt92DTR0mTbsZ+m2bHQtucg4+:CE1K3nvzKmDN0mXm+m2bwy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EB96233FB228653ED56B4B3245B39360593BBBA1A11ACC2F17F0480DDF664701E3BA56
sha3_384: 7b4758e08bac1e1c24bc1cf241ef251c411e974ce0c01b0c6d575753d5799b379eb0d383b4dce7a0664a72fcfa3dca89
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2020-03-14 17:59:41

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: Unreal Academy
FileDescription: Half-Life: Alyx FakeVR Mod Setup
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: Half-Life: Alyx FakeVR Mod
ProductVersion: 1.4
Translation: 0x0000 0x04b0

Trojan.Multi.GenAutorunTaskFile.a also known as:

LionicTrojan.Multi.GenAutorunTaskFile.4!c
McAfeeArtemis!DBC8BE099052
SangforTrojan.LNK.GenAutorunTaskFile.a
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
SymantecTrojan.Gen.MBT
APEXMalicious
KasperskyTrojan.Multi.GenAutorunTaskFile.a
AlibabaTrojan:Win32/GenAutorunTaskFile.f76cddf9
ViRobotTrojan.Win32.Z.Multi.9234392
SophosGeneric ML PUA (PUA)
DrWebTrojan.Miner.117
McAfee-GW-EditionBehavesLike.Win32.BadFile.rc
AviraTR/Redcap.gyvdn
KingsoftWin32.Troj.Multi.a.(kcloud)
GridinsoftRansom.Win32.Miner.sa
ZoneAlarmTrojan.Multi.GenAutorunTaskFile.a
CynetMalicious (score: 100)
VBA32Trojan.GenAutorunTaskFile
CylanceUnsafe

How to remove Trojan.Multi.GenAutorunTaskFile.a?

Trojan.Multi.GenAutorunTaskFile.a removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment