Generic.DataStealer.1.EEA2B4CF removal tips

The Generic.DataStealer.1.EEA2B4CF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.DataStealer.1.EEA2B4CF virus can do?

Authenticode signature is invalid
CAPE detected the Fareit malware family

How to determine Generic.DataStealer.1.EEA2B4CF?


File Info:
name: 65A8FEC4B5D7410A78AC.mlw
path: /opt/CAPEv2/storage/binaries/a5106c36f185f42cd33d0daea5891d3503155d3190b605140c2e5b780f11e78f
crc32: 89154CFB
md5: 65a8fec4b5d7410a78aceca38cf3dce1
sha1: 7d7a3c794780115ac653f3f3e6b44f4091c0c9bb
sha256: a5106c36f185f42cd33d0daea5891d3503155d3190b605140c2e5b780f11e78f
sha512: 7298bfcfa6083de9f2bb665effdff0abd1b3c99585d9365c29949d27ac416b9eff2713f5d58e5a35cd93872b885804282025f071a2b9fcd57a6577849294fe1f
ssdeep: 1536:qRyeRylDm6HaqTl7J7/YK36aRM20Hv7OgzdTvWkzkIsNt:PzpdHhwKOOg+vr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15A950A03F4C1E0F2C1A226753BC12771F3FD9A7978764E4AEF9C5845A9F2697AB06006
sha3_384: ab15e2751861f308d909436e5dc4f6fa86f0671fcfb2ef20d5c3403ca70ec9da6810f70cd97aa41b0b1f8c429c1e711f
ep_bytes: 33d033c233d068e50c410090f8907202
timestamp: 2014-09-12 06:02:04

Version Info:
0: [No Data]

Generic.DataStealer.1.EEA2B4CF also known as:

Bkav	W32.AIDetect.malware1
DrWeb	Trojan.PWS.Stealer.4118
MicroWorld-eScan	Generic.DataStealer.1.EEA2B4CF
FireEye	Generic.mg.65a8fec4b5d7410a
CAT-QuickHeal	Trojanpws.Tepfer.20314
ALYac	Generic.DataStealer.1.EEA2B4CF
Cylance	Unsafe
Cybereason	malicious.4b5d74
BitDefenderTheta	Gen:NN.ZexaF.34212.ZnZ@aiabk6f
VirIT	Trojan.Win32.Crypt_s.JIM
Symantec	Downloader.Ponik!gm
ESET-NOD32	a variant of Win32/PSW.Fareit.F
ClamAV	Win.Trojan.PonyStealer-9831667-0
Kaspersky	Trojan-PSW.Win32.Tepfer.gen
BitDefender	Generic.DataStealer.1.EEA2B4CF
Avast	Sf:Crypt-AS [Trj]
Ad-Aware	Generic.DataStealer.1.EEA2B4CF
Emsisoft	Generic.DataStealer.1.EEA2B4CF (B)
Comodo	TrojWare.Win32.PWS.Fareit.GS@5t8zib
VIPRE	Trojan.Win32.Fareit.j (fs)
McAfee-GW-Edition	PWS-Zbot-FAVV!65A8FEC4B5D7
Sophos	ML/PE-A
Ikarus	Trojan.Win32.Pony
GData	Win32.Trojan-Stealer.Zbot.AB
Avira	TR/Kryptik.avp.8
ZoneAlarm	Trojan-PSW.Win32.Tepfer.gen
Microsoft	PWS:Win32/Fareit
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	PWS-Zbot-FAVV!65A8FEC4B5D7
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.613828680
APEX	Malicious
Rising	Stealer.Fareit!8.170 (TFE:dGZlOgJmjdeFOpWuOA)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Fareit.G!tr
AVG	Sf:Crypt-AS [Trj]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Generic.DataStealer.1.EEA2B4CF?

Generic.DataStealer.1.EEA2B4CF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X