About “Application.Generic.3517948” infection

The Application.Generic.3517948 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Generic.3517948 virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Application.Generic.3517948?


File Info:
name: 2ADE2DA3583571BCD345.mlw
path: /opt/CAPEv2/storage/binaries/a72ea8293e751048e0db7603495e36686e032b8e379ba4953eac7b61c44ab4f6
crc32: 7AED64EB
md5: 2ade2da3583571bcd345c57ef891166d
sha1: 984f4e530bb0924c546313238982dc46e55a78fc
sha256: a72ea8293e751048e0db7603495e36686e032b8e379ba4953eac7b61c44ab4f6
sha512: 77756308ed2a0c755fd20b19e61ff0d21e7287cdbc4735363ac91cebabba3ad0e05e90c96fab466a4b07bc0e9e584e695474539a5f13e205b342dda8271c5911
ssdeep: 6144:6EMxHwMPFsByjZt4DSIVj1ygk/9oQbmyYPCcq3krlJXEN0Uq86fmccGE/fW:f6XPFsqz4DSIVJc+QcfVrlJXw0U+u5W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11EC49E12B9F390F5C76153F20E6A7737BBB987860B11CFC39354DD1859223929A3B12A
sha3_384: 77504773eb43fc1504134f35cab3b205c853b08e96e34bf4d821a16c3b3e83a31af9e202d0549d86ac04b2822c1c844b
ep_bytes: 558bec6aff6880ad4600680c9d440064
timestamp: 2012-07-08 09:18:36

Version Info:
0: [No Data]

Application.Generic.3517948 also known as:

Bkav	W32.Common.CF687BEF
Lionic	Trojan.Win32.Generic.lvQ7
MicroWorld-eScan	Application.Generic.3517948
ClamAV	Win.Trojan.Agent-914509
CAT-QuickHeal	Hacktool.Flystudio.16558
Skyhigh	BehavesLike.Win32.Infected.hh
ALYac	Application.Generic.3517948
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.FlyStudio.V2ir
K7AntiVirus	Adware ( 005848221 )
K7GW	Adware ( 005848221 )
Cybereason	malicious.30bb09
Arcabit	Application.Generic.D35ADFC
BitDefenderTheta	Gen:NN.ZexaF.36792.HqX@aO8G5mpb
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Application.Generic.3517948
Avast	Win32:Malware-gen
Emsisoft	Application.Generic (A)
F-Secure	Heuristic.HEUR/AGEN.1345421
VIPRE	Application.Generic.3517948
FireEye	Generic.mg.2ade2da3583571bc
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Agent.agq
Google	Detected
Avira	HEUR/AGEN.1345421
MAX	malware (ai score=74)
Antiy-AVL	Trojan/Win32.TSGeneric
Kingsoft	malware.kb.a.985
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Win32.Trojan.PSE.15IBL0F
McAfee	Artemis!2ADE2DA35835
VBA32	Adware.Agent
Cylance	unsafe
Rising	Trojan.Win32.Generic.1358AF16 (C64:YzY0Otinc3c0Eunf)
Yandex	Trojan.GenAsa!3nrLpeEQWWY
Ikarus	Trojan-Dropper.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/PackedFlyStudio
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Application.Generic.3517948?

Application.Generic.3517948 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X