Malware

Should I remove “Generic.DataStealer.1.D2169649”?

Malware Removal

The Generic.DataStealer.1.D2169649 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.DataStealer.1.D2169649 virus can do?

  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Steals private information from local Internet browsers
  • Exhibits behavior characteristic of Pony malware
  • Collects information about installed applications
  • Attempts to access Bitcoin/ALTCoin wallets
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed mail clients
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.DataStealer.1.D2169649?


File Info:

crc32: B5243428
md5: d9689e905cda8b6560f4950f66a9627b
name: D9689E905CDA8B6560F4950F66A9627B.mlw
sha1: 1f0dd7acf2e67982afe55007aa2aff9573b7b65f
sha256: 6c122c609bd392e1127cb3163dfac616980100b9f875c9a7a55b25c3f1c360e0
sha512: 3ead6fffaec8620038ddfe2c86d65974e469a6359d463a30762f758422451c1f329c389c29cafc02ef6d638f85a0a317134722335dec826309116436718b3cfd
ssdeep: 3072:TwTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndI:MTLFuD6fOXlql/GLJrqqndtndhndKndI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.DataStealer.1.D2169649 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.13052
MicroWorld-eScanGeneric.DataStealer.1.D2169649
FireEyeGeneric.mg.d9689e905cda8b65
CAT-QuickHealTrojanpws.Tepfer.20314
ALYacGeneric.DataStealer.1.D2169649
MalwarebytesSpyware.Pony
VIPRETrojan.Win32.Fareit.j (fs)
SangforWin.Trojan.Fareit-403
CrowdStrikewin/malicious_confidence_100% (W)
K7GWPassword-Stealer ( 0055e3dc1 )
K7AntiVirusPassword-Stealer ( 0055e3dc1 )
BitDefenderThetaGen:NN.ZexaF.34590.k8W@aGc4VOb
CyrenW32/S-531fd00a!Eldorado
APEXMalicious
AvastSf:Crypt-AQ [Trj]
CynetMalicious (score: 100)
KasperskyTrojan-PSW.Win32.Tepfer.gen
BitDefenderGeneric.DataStealer.1.D2169649
NANO-AntivirusTrojan.Win32.Tepfer.dqjlcn
ViRobotBackdoor.Win32.Pony.Gen.A
RisingTrojan.Fareit!1.A343 (CLASSIC)
Ad-AwareGeneric.DataStealer.1.D2169649
SophosML/PE-A + Troj/DwnLdr-MJA
ComodoTrojWare.Win32.PWS.Fareit.GS@5t8zib
BaiduWin32.Trojan-PSW.Fareit.a
ZillyaTrojan.Tepfer.Win32.80159
TrendMicroTROJ_GEN.R002C0CBO21
EmsisoftGeneric.DataStealer.1.D2169649 (B)
JiangminTrojan/PSW.Tepfer.ccdw
eGambitUnsafe.AI_Score_100%
AviraTR/BAS.Fareit.owaqw
Antiy-AVLTrojan[PSW]/Win32.Tepfer
MicrosoftPWS:Win32/Fareit
GridinsoftTrojan.Win32.Fareit.vl!i
ArcabitGeneric.DataStealer.1.D2169649
ZoneAlarmTrojan-PSW.Win32.Tepfer.gen
GDataWin32.Trojan-Stealer.Fareit.O
AhnLab-V3Trojan/Win32.Tepfer.R295551
Acronissuspicious
McAfeeFareit-FBK!D9689E905CDA
TACHYONTrojan-PWS/W32.Tepfer.165348
VBA32SScope.Malware-Cryptor.Ponik
PandaTrj/Genetic.gen
ESET-NOD32Win32/PSW.Fareit.G
TrendMicro-HouseCallTROJ_GEN.R002C0CBO21
TencentMalware.Win32.Gencirc.10b0c571
YandexTrojan.PSteal.Gen.TO
SentinelOneStatic AI – Malicious PE
FortinetW32/Fareit.G!tr
AVGSf:Crypt-AQ [Trj]
Cybereasonmalicious.05cda8

How to remove Generic.DataStealer.1.D2169649?

Generic.DataStealer.1.D2169649 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment