Malware

What is “Generic.DataStealer.1.830C96C7”?

Malware Removal

The Generic.DataStealer.1.830C96C7 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.DataStealer.1.830C96C7 virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.DataStealer.1.830C96C7?


File Info:

crc32: 51C7AC6A
md5: 91cc315e0b3ba87c15429d590b828fe2
name: 91CC315E0B3BA87C15429D590B828FE2.mlw
sha1: 59748a59bd6a768e578adad3ebf11e22d7326a65
sha256: bba323561ba1520c5ddeb33fc03ec4474edcfa18fea8e9f6df16a11c90e1ad25
sha512: d6aaabc6c859bad1ee218b16f2e73ccdcdc33ae0637904ea08ca54feaded5588dbf5c6fbfaaa7f6472c27e4c0e3ead9fa0d71c6dc16da98bbc7b2398ce570f2f
ssdeep: 6144:7f+BLtABPDAx18yNkmpkmTm2X7yFzxWAmfrc73nEiATe0VaP:YxiyNqmTm2X7yN8DfY6TeBP
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: injector.exe
FileVersion: 0.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: injector.exe

Generic.DataStealer.1.830C96C7 also known as:

K7AntiVirusPassword-Stealer ( 0057016e1 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.StealerNET.76
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MsilFC.S19435832
ALYacGeneric.DataStealer.1.830C96C7
CylanceUnsafe
SangforInfostealer.MSIL.Stealgen.GA!MTB
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaTrojanPSW:MSIL/Stealgen.09e9effc
K7GWPassword-Stealer ( 0057016e1 )
Cybereasonmalicious.e0b3ba
CyrenW32/Trojan.ZFHQ-3094
ESET-NOD32a variant of MSIL/PSW.Agent.RML
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Packed.Datastealer-9856291-0
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefenderGeneric.DataStealer.1.830C96C7
MicroWorld-eScanGeneric.DataStealer.1.830C96C7
TencentMsil.Trojan-qqpass.Qqrob.Htma
Ad-AwareGeneric.DataStealer.1.830C96C7
BitDefenderThetaGen:NN.ZemsilF.34686.rm0@a06UWSi
McAfee-GW-EditionGenericRXOE-QP!91CC315E0B3B
FireEyeGeneric.mg.91cc315e0b3ba87c
EmsisoftGeneric.DataStealer.1.830C96C7 (B)
JiangminTrojan.PSW.MSIL.bnfw
AviraHEUR/AGEN.1141546
eGambitUnsafe.AI_Score_64%
MicrosoftPWS:MSIL/Stealgen.GA!MTB
ArcabitGeneric.DataStealer.1.830C96C7
AegisLabTrojan.Win32.DataStealer.4!c
GDataGeneric.DataStealer.1.830C96C7
AhnLab-V3Malware/Gen.RL_Reputation.C4300952
McAfeeGenericRXOE-QP!91CC315E0B3B
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
MalwarebytesMalware.AI.4237153791
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DDR21
RisingStealer.Agent!1.D483 (CLOUD)
IkarusTrojan.MSIL.Spy
FortinetMSIL/Agent.RML!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Generic.DataStealer.1.830C96C7?

Generic.DataStealer.1.830C96C7 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment