Trojan

Should I remove “Trojan.StopRI.S12908284”?

Malware Removal

The Trojan.StopRI.S12908284 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.StopRI.S12908284 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • Unconventionial language used in binary resources: Faeroese
  • A scripting utility was executed
  • Attempts to stop active services
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.StopRI.S12908284?


File Info:

crc32: 383C943A
md5: 5b40f7309da2e12c989bbfb0d2ef32ca
name: 5B40F7309DA2E12C989BBFB0D2EF32CA.mlw
sha1: fdc3c2413d39a489e6a7ae9f79848bdfe5db6a90
sha256: ef3ddc0a3115b817b46dc3efb51d8b6a3b847b646ffb8599fff30732a13df056
sha512: 66ca37429cefe27b578966241ada5839d4fc220771196013516e2a90f95905e1fc29ff0327c9a37904263a1c92b211da2bdb61d517bcee8e6d6e6d4fbc48214c
ssdeep: 6144:CXfjsJ9HfLj1+TyhkRw8S53r3QkPQbOnuXMo8:CXfi2gcw8873KyM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.StopRI.S12908284 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0056809d1 )
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen9.40885
ClamAVWin.Packed.Generickdz-7679682-0
CAT-QuickHealTrojan.StopRI.S12908284
McAfeePacked-GAV!5B40F7309DA2
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.1990840
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/generic.ali2000010
K7GWTrojan ( 0056809d1 )
Cybereasonmalicious.09da2e
CyrenW32/Wacatac.BN.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Kryptik.HCVB
APEXMalicious
AvastWin32:CoinminerX-gen [Trj]
CynetMalicious (score: 100)
KasperskyUDS:Trojan.Multi.GenericML.xnet
BitDefenderTrojan.GenericKDZ.66650
NANO-AntivirusTrojan.Win32.Kryptik.iowhnl
MicroWorld-eScanTrojan.GenericKDZ.66650
SophosML/PE-A + Mal/GandCrypt-A
ComodoMalware@#30gt7v80kirgu
BitDefenderThetaGen:NN.ZexaF.34236.sqW@aGliklhG
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionPacked-GAV!5B40F7309DA2
FireEyeGeneric.mg.5b40f7309da2e12c
EmsisoftTrojan.GenericKDZ.66650 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Banker.Danabot.cgm
AviraTR/Crypt.Agent.dzfur
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.304F414
MicrosoftTrojan:Win32/Tofsee.PVE!MTB
ArcabitTrojan.Generic.D1045A
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.GenericKDZ.66650
AhnLab-V3Trojan/Win.MalPe.X2062
VBA32BScope.Trojan.AET.281105
MAXmalware (ai score=82)
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.C729 (CLASSIC)
IkarusTrojan.Inject
FortinetW32/GenKryptik.ELQV!tr
AVGWin32:CoinminerX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.StopRI.S12908284?

Trojan.StopRI.S12908284 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment