Malware

Generic.537 removal

Malware Removal

The Generic.537 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.537 virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity contains more than one unique useragent.
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
yz.app.sogou.com
ping.t.sogou.com
xz.sogou.com
yze.t.sogou.com

How to determine Generic.537?


File Info:

crc32: CA89223E
md5: ef4cf27abb748663fac1995f201a204b
name: sogouekn.e
sha1: c72cfd65029a883517557f1777638bcca9e50898
sha256: 90488514c59066aa5060da4f26482999b999dc0f2ed0a3de8e17551697aad1a8
sha512: 6e179f093a4bc40c94174504d2d7767a974ff84ec708f21367c79125a5603b8ab5989e8b2691b0e4beea2c329d0525e0c0a54561f37af461c213990c4c2548c2
ssdeep: 49152:suuE7AnqIxGrGYyZa/tgrYJUGfZC3wA6EylfwEaFWd:2E7AqrlyutLxC3sEwwMd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 2014 Sogou.com Inc. All rights reserved.
InternalName: MiniDownLoad.exe
FileVersion: 3.1.12.94
CompanyName: Sogou.com Inc.
ProductName: x8f6fx4ef6x52a9x624b
ProductVersion: 3.1.12.94
FileDescription: x8f6fx4ef6x52a9x624b
OriginalFilename: MiniDownLoad.exe
Translation: 0x0804 0x04b0

Generic.537 also known as:

BkavW32.HfsAdware.170E
McAfeeArtemis!EF4CF27ABB74
ZillyaDownloader.SogouCRTD.Win32.237
K7GWUnwanted-Program ( 004cca081 )
K7AntiVirusUnwanted-Program ( 004cca081 )
SymantecSMG.Heur!gen
AvastWin32:Trojan-gen
ClamAVWin.Worm.Chir-2282
Kasperskynot-a-virus:Downloader.Win32.Sogou.g
NANO-AntivirusTrojan.Win32.Sogou.dytxqq
ComodoApplication.Win32.Sogou.C
DrWebBackDoor.Gbot.2850
VIPREAdware.Sogou
TrendMicroTROJ_GEN.R00JC0OFF16
McAfee-GW-EditionArtemis!PUP
SophosGeneric PUA MH (PUA)
AviraBDS/Gbot.eevy
Antiy-AVLRiskWare[Downloader]/Win32.Sogou.g
AhnLab-V3PUP/Win32.Downloader
VBA32Downloader.Sogou
PandaGeneric Suspicious
YandexPUA.Downloader!
Ikarusnot-a-virus:Downloader.Sogou
AVGGeneric.537

How to remove Generic.537?

Generic.537 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment