Trojan.ReverseShell removal

The Trojan.ReverseShell is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.ReverseShell virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.ReverseShell?


File Info:
name: 7AAD8038792C4F4B4DDC.mlw
path: /opt/CAPEv2/storage/binaries/e6240711336dc9f1a24408cf0b912cac36e4c66528147fc30e356ff16a3d1c15
crc32: 62683ADB
md5: 7aad8038792c4f4b4ddc27abbedf2324
sha1: 8afc65d15c7f6a4bbddf3587b577a8ad0a3e9299
sha256: e6240711336dc9f1a24408cf0b912cac36e4c66528147fc30e356ff16a3d1c15
sha512: 23d073871f85534f7874a951f2ba0738268c5910889e9138cc488d5138c5af3dd3a4d1d090c4f7af1781483fd2c08000c61028f82c105f0692172868de64d6ba
ssdeep: 768:nzOmETIfSj0k6PP3lLuzZPKqaYbEIHinrTgW:nz3ftk6PP3lLuBZa9nrTgW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E8131B99BE244CE7EA51533E90E7C776273DF1814F235BB3B730B6345B236922099246
sha3_384: 48411b02f20e6a8f0364b12b5c599db3e19e4ae1cd7ec853e8ca467c3683c64411da5a4654314c05f13567aa7a714a15
ep_bytes: 83ec1cc7042402000000ff15c4814000
timestamp: 2022-08-11 12:50:59

Version Info:
0: [No Data]

Trojan.ReverseShell also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.61255967
FireEye	Generic.mg.7aad8038792c4f4b
ALYac	Trojan.GenericKD.61255967
Cylance	Unsafe
Zillya	Trojan.ReverseShell.Win32.97
K7AntiVirus	Trojan ( 00596ded1 )
Alibaba	Trojan:Win32/ReverseShell.c6a1e03e
K7GW	Trojan ( 00596ded1 )
Cybereason	malicious.15c7f6
Cyren	W32/Rozena.EF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/ReverseShell.AG
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.61255967
Avast	Win32:Trojan-gen
Ad-Aware	Trojan.GenericKD.61255967
Emsisoft	Trojan.GenericKD.61255967 (B)
VIPRE	Trojan.GenericKD.61255967
TrendMicro	TROJ_GEN.R002C0PHD22
McAfee-GW-Edition	RDN/Real Protect-LS
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.61255967
Jiangmin	Trojan.CoinMiner.kv
Avira	TR/Redcap.ihbrg
Antiy-AVL	Trojan/Generic.ASMalwS.7A61
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	RDN/Real Protect-LS
MAX	malware (ai score=89)
VBA32	Trojan.ClipSpy
Malwarebytes	Trojan.ReverseShell
TrendMicro-HouseCall	TROJ_GEN.R002C0PHD22
Rising	Trojan.ReverseShell!8.5EA1 (CLOUD)
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.186679034.susgen
Fortinet	W32/Agent.ABUR!tr
BitDefenderTheta	Gen:NN.ZexaF.34592.c0Y@aCcXtMk
AVG	Win32:Trojan-gen

How to remove Trojan.ReverseShell?

Trojan.ReverseShell removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X