What is “Application.Generic.3021621”?

The Application.Generic.3021621 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Generic.3021621 virus can do?

Unconventionial language used in binary resources: Spanish (Modern)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Application.Generic.3021621?


File Info:
crc32: DBC1D3CB
md5: 27e2489910ee51c814514e9d077bc048
name: 27E2489910EE51C814514E9D077BC048.mlw
sha1: f693fb820705b92f9e28e1a24226319e428247b6
sha256: f256aa813e46a11cf7a6883cef2592ce921eaff4470f1f071afb53615310d3d6
sha512: 635a043140c98261e32508639e61e023934997abc8124756e513e62565e4417682df5860856390cdaf05c200523ac44ef2cd009ef24b754cc93f7346d706924a
ssdeep: 12288:Wlek7VIjqS/AttnfMznf81aW56jmi4EAEKw46Ye/WOw6iuex082+ueN3Rym:cfKE8WHEm6Yjjduex082+VNhR
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Microsoft Corporation.  Alle Rechte vorbehalten.
InternalName: dxsetup.exe
FileVersion: 4.9.0.0904
CompanyName: Microsoft Corporation
ProductName: Microsoftxae DirectX fxfcr Windowsxae
ProductVersion: 4.9.0.0904
FileDescription: Microsoft DirectX-Setup
OriginalFilename: dxsetup.exe
Translation: 0x0407 0x04b0

Application.Generic.3021621 also known as:

Elastic	malicious (high confidence)
DrWeb	Tool.BtcMine.2239
ClamAV	Win.Malware.Generickdz-9775964-0
CAT-QuickHeal	PUA.WacatacRI.S9539263
ALYac	Trojan.GenericKDZ.65744
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 0057db441 )
K7AntiVirus	Trojan ( 0057db441 )
Cyren	W64/S-f46b57c9!Eldorado
Symantec	Miner.XMRig
ESET-NOD32	a variant of Win64/CoinMiner.PQ potentially unwanted
APEX	Malicious
Avast	Win64:CoinminerX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Miner.gen
BitDefender	Application.Generic.3021621
MicroWorld-eScan	Trojan.GenericKDZ.65744
Ad-Aware	Application.Generic.3021621
Sophos	Troj/Agent-BCPO
McAfee-GW-Edition	BehavesLike.Win64.Fake.cc
FireEye	Generic.mg.27e2489910ee51c8
Emsisoft	Application.Generic (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	RiskTool.Generic.pkx
Avira	HEUR/AGEN.1135765
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	TrojanDownloader:Win32/Upatre
GData	Win32.Application.Coinminer.C8TYER
AhnLab-V3	Unwanted/Win.CoinMiner.R430169
Acronis	suspicious
McAfee	GenericRXAA-AA!27E2489910EE
MAX	malware (ai score=77)
Malwarebytes	Upatre.Trojan.Downloader.DDS
Yandex	Trojan.GenAsa!Xy4KCITNuvE
Ikarus	Trojan.Win64.CoinMiner
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/CoinMiner.X!tr
AVG	Win64:CoinminerX-gen [Trj]

How to remove Application.Generic.3021621?

Application.Generic.3021621 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X