Categories: Malware

Application.Generic.1849042 removal guide

The Application.Generic.1849042 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Generic.1849042 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Starts servers listening on 0.0.0.0:5217, 0.0.0.0:5317, 0.0.0.0:36698
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Sniffs keystrokes

How to determine Application.Generic.1849042?


File Info:
name: 93D63BF55405F00BB3B8.mlwpath: /opt/CAPEv2/storage/binaries/a4256846de95937de46d0a1d39b2647903019a870dd28f3dc03166161abe9300crc32: F1251B6Bmd5: 93d63bf55405f00bb3b8bcf38f80f5c2sha1: 659f528f300617c1c05c71cebd8a9be7026541d0sha256: a4256846de95937de46d0a1d39b2647903019a870dd28f3dc03166161abe9300sha512: e06a7d6ecf10f9b4c6f5289b86d13787a0ab37dcbc60ce9ba5a09bb61106bf030ec1216a81e6d11a819136904425bab79c7446240c7de2f33ba58ab3ede54cc7ssdeep: 24576:QyKy3CY/jpRkWsUJTF3KE+ecRba2h06/wRJCoEC:QySYVmUJTF8559fRoECtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DB559D12F1D780B2D342263014AB6339FA759F594B218BCBA7E8FE3C5D32191D6B714Asha3_384: a025232c2c2a810e0542983d3d73ba867301a0377bd8b195ee4bea6057d5d638d391fefb8f02f6c0c4c86b1eaa42921eep_bytes: 558bec6aff68709d51006874674b0064timestamp: 2018-02-07 15:11:14
Version Info:
FileVersion: 1.0.0.0FileDescription: S2 Gate WayProductName: S2 Gate WayProductVersion: 1.0.0.0CompanyName: 尘LegalCopyright: S2网关定制版Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Application.Generic.1849042 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.lIa2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
McAfee	Artemis!93D63BF55405
Cylance	Unsafe
Sangfor	Trojan.Win32.Kolovorot.cjy
K7AntiVirus	Trojan ( 005246d51 )
BitDefender	Application.Generic.1849042
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.55405f
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Confidence-6629254-0
Kaspersky	Trojan.Win32.Kolovorot.cjy
Alibaba	Trojan:Win32/Kolovorot.c0cf1f6b
NANO-Antivirus	Trojan.Win32.Kolovorot.fcqqfm
MicroWorld-eScan	Application.Generic.1849042
Rising	Trojan.Generic@AI.92 (RDMK:ZBzwpCptzs7QjNnVxb67PQ)
Ad-Aware	Application.Generic.1849042
Emsisoft	Application.Generic.1849042 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
F-Secure	Trojan.TR/Kolovorot.sbepd
DrWeb	Trojan.MulDrop8.24671
Zillya	Trojan.Kolovorot.Win32.630
McAfee-GW-Edition	BehavesLike.Win32.Trojan.th
FireEye	Generic.mg.93d63bf55405f00b
Sophos	Generic PUA GF (PUA)
Webroot	W32.Gen.BT
Avira	TR/Kolovorot.sbepd
MAX	malware (ai score=95)
Microsoft	Trojan:Win32/Occamy.CA4
Arcabit	Application.Generic.D1C36D2
ZoneAlarm	Trojan.Win32.Kolovorot.cjy
GData	Win32.Trojan.FlyStudio.S
VBA32	Trojan.Kolovorot
ALYac	Application.Generic.1849042
TACHYON	Trojan/W32.Kolovorot.1372160
Malwarebytes	Trojan.MalPack.FlyStudio
TrendMicro-HouseCall	TROJ_GEN.R014H0CCR22
Tencent	Malware.Win32.Gencirc.11691182
SentinelOne	Static AI – Malicious PE
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/Kolovorot.CJY!tr
BitDefenderTheta	Gen:NN.ZexaF.34638.tr0@ayrZ5Yib
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)