Categories: Spy

Dropped:Generic.Spyagent.5.06E662DC removal

The Dropped:Generic.Spyagent.5.06E662DC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dropped:Generic.Spyagent.5.06E662DC virus can do?

  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (7 unique times)
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Steals private information from local Internet browsers
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Attempts to create or modify system certificates

Related domains:

ip-api.com
www.facebook.com
uehge4g6gh.2ihsfa.com
iplogger.org

How to determine Dropped:Generic.Spyagent.5.06E662DC?


File Info:

crc32: 545DF089md5: 981c541cb4dd9921a82c85286c23451dname: 981C541CB4DD9921A82C85286C23451D.mlwsha1: 9cf1be9d49e998c16d0d33b85ac3ddac83d441acsha256: fad987a365400592f66296ab1a99cd7b77786b6e30c74d217646e94e8d111f5dsha512: 82e8a7f0afd45c5ff75413b2e3ff5f105917809bb1af46f76e4e12d88100fbec22226caccd9aa2ab436988e59e97f78c64b3101938f25a3f0ae54796bf584af4ssdeep: 24576:DYCFCdoKbl2cVdrAXIwK3+XSTNkdBAnlXG6+Z1mbX:xsbl2cVdrKIX+XSkUlXF+Z1Itype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Dropped:Generic.Spyagent.5.06E662DC also known as:

Bkav W32.AIDetect.malware2
K7AntiVirus Trojan ( 005690671 )
Elastic malicious (high confidence)
DrWeb Tool.PassView.1944
Cynet Malicious (score: 100)
CAT-QuickHeal PUA.IgenericRI.S15903427
ALYac Dropped:Generic.Spyagent.5.06E662DC
Cylance Unsafe
K7GW Trojan ( 005690671 )
Cybereason malicious.cb4dd9
Cyren W32/CookieStealer.A.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Agent.ACLN
APEX Malicious
Avast Win32:Malware-gen
ClamAV Win.Malware.Spyagent-9830839-0
Kaspersky Trojan.Win32.CookiesStealer.b
BitDefender Dropped:Generic.Spyagent.5.06E662DC
NANO-Antivirus Riskware.Win32.PSWTool.hqsnsl
MicroWorld-eScan Dropped:Generic.Spyagent.5.06E662DC
Ad-Aware Dropped:Generic.Spyagent.5.06E662DC
Sophos Generic ML PUA (PUA)
BitDefenderTheta Gen:NN.ZexaF.34722.8uW@ae39bqcj
TrendMicro TROJ_GEN.R06CC0PF321
McAfee-GW-Edition BehavesLike.Win32.PUP.dc
FireEye Generic.mg.981c541cb4dd9921
Emsisoft Dropped:Generic.Spyagent.5.06E662DC (B)
SentinelOne Static AI – Malicious PE
Jiangmin Trojan.Scar.nra
Avira TR/Redcap.ahesa
eGambit Unsafe.AI_Score_99%
Antiy-AVL Trojan/Generic.ASMalwS.2FFCE3E
Microsoft Trojan:Win32/Caynamer.A!ml
ZoneAlarm Trojan.Win32.CookiesStealer.b
GData Dropped:Generic.Spyagent.5.06E662DC
AhnLab-V3 Trojan/Win32.RL_Infostealer.R356907
McAfee GenericRXAA-AA!981C541CB4DD
MAX malware (ai score=80)
VBA32 BScope.Trojan.Infospy
Malwarebytes Generic.Trojan.Malicious.DDS
Panda Trj/Genetic.gen
TrendMicro-HouseCall TROJ_GEN.R06CC0PF321
Rising Malware.Heuristic!ET#99% (RDMK:cmRtazpR4RFZtWNXOc7PA8vNt2nB)
Yandex Trojan.Convagent!WP9TbZjCMq4
Ikarus Trojan.Malagent
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Agent.VHO!tr
AVG Win32:Malware-gen

How to remove Dropped:Generic.Spyagent.5.06E662DC?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Generic.Dacic.94CCEEA9.A.5CD2C435 (B) removal instruction

The Generic.Dacic.94CCEEA9.A.5CD2C435 (B) is considered dangerous by lots of security experts. When this infection is…

32 mins ago

Should I remove “HackTool.Win32.KMSAuto.i”?

The HackTool.Win32.KMSAuto.i is considered dangerous by lots of security experts. When this infection is active,…

42 mins ago

Win32/Kryptik.XFZ information

The Win32/Kryptik.XFZ is considered dangerous by lots of security experts. When this infection is active,…

53 mins ago

How to remove “Trojan:Win32/Cendelf!pz”?

The Trojan:Win32/Cendelf!pz is considered dangerous by lots of security experts. When this infection is active,…

57 mins ago

Should I remove “Fugrafa.30711”?

The Fugrafa.30711 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Malware.AI.1251652225 information

The Malware.AI.1251652225 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago