What is “FileRepMetagen [Spy]”?

The FileRepMetagen [Spy] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What FileRepMetagen [Spy] virus can do?

• Creates RWX memory
• Unconventionial language used in binary resources: Chinese (Simplified)
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

Related domains:

How to determine FileRepMetagen [Spy]?

File Info:
crc32: 691DA87D
md5: e6f1035b2214c1b23bb79994d9d6a7a2
name: hhclass.exe
sha1: f1ced6a253c920bf60c7c67bda6a68dd66beb004
sha256: 97cc86ff0561f435cb2ffc63a52dbc47af9a4a342346f6199cc105583b68d118
sha512: 71edfae163279153bcd19491511bae0b4cdfd0a3cb2a7c83ca86eb8f97b56fe1c10c4aa64e7d87a7c8135d75b60b234589c377181c0e2e6add33432e77bbff3e
ssdeep: 12288:6YzEidS9g2WCIexfY8Exr5oD3EAJZNTw06d8PkGWe+MtYCUqd:Bwv9gp2m8ExNKfwIMR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

FileRepMetagen [Spy] also known as:

How to remove FileRepMetagen [Spy]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.