How to remove “Win32:Small-CGE [Trj]”?

The Win32:Small-CGE [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Small-CGE [Trj] virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:Small-CGE [Trj]?


File Info:
name: 876D5EB58AB56810EAA1.mlw
path: /opt/CAPEv2/storage/binaries/3819b7f988325316fa9f65b61809fb1930874724f35ea7a7aefe30d6864fa40b
crc32: 05AFF615
md5: 876d5eb58ab56810eaa1533c368efc75
sha1: 9585a800af71a52adc2c7a02eb5e00b2addcd209
sha256: 3819b7f988325316fa9f65b61809fb1930874724f35ea7a7aefe30d6864fa40b
sha512: 67a8b74b40f7fdac47fd5d7f4dd6614bb417fb29359ca76626f321a1e7df22487e604a657606bab1ea4a30d13dd16adf2a6ebcb9c93eee1a9ff1b9bb31bf9f5b
ssdeep: 1536:mGHdpHdYoVZgmCc1sUE5/iYs93Z9rx5lBvL:mlorgmCc1ZE5cZ995lBvL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8A3F1D7B11AFB50D236E1314FE2A5C75990CB4702E6712D4BBB430E69A73358C2A63A
sha3_384: 837620e19b4cdf3a9c1e1fcbe1c8fc6ccd3a08320217e7582946cf838194e80599e227f9c5b371719f11c73d0dfab477
ep_bytes: 00000000000000000000000000000000
timestamp: 2005-10-31 14:17:07

Version Info:
0: [No Data]

Win32:Small-CGE [Trj] also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
ClamAV	Win.Downloader.Razy-9654283-0
McAfee	Artemis!876D5EB58AB5
Malwarebytes	Generic.Trojan.Downloader.DDS
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.58ab56
Cyren	W32/Heuristic-CO3!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Downloader.Win32.Small.cca
Avast	Win32:Small-CGE [Trj]
F-Secure	Heuristic.HEUR/AGEN.1200442
Zillya	Downloader.Small.Win32.152328
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.876d5eb58ab56810
Sophos	ML/PE-A
Ikarus	Trojan-Downloader.Win32.Small
Jiangmin	TrojanDownloader.Small.cou
Avira	HEUR/AGEN.1200442
Antiy-AVL	Trojan[Downloader]/Win32.Small
ZoneAlarm	Trojan-Downloader.Win32.Small.cca
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CC423
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Small-CGE [Trj]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Win32:Small-CGE [Trj]?

Win32:Small-CGE [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X