Generic.Exploit.Shellcode.3.08224A1F removal instruction

The Generic.Exploit.Shellcode.3.08224A1F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Exploit.Shellcode.3.08224A1F virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Generic.Exploit.Shellcode.3.08224A1F?


File Info:
name: 5A5B60878F256C6694C8.mlw
path: /opt/CAPEv2/storage/binaries/f3c61fe552b600df4e84e68cca186069be8d18fcb5f56b9ea701c6122a7dbf52
crc32: 27294D57
md5: 5a5b60878f256c6694c8480903bd49a3
sha1: d24eaadfaada1ad9dc92b4c04d5217f270b59efe
sha256: f3c61fe552b600df4e84e68cca186069be8d18fcb5f56b9ea701c6122a7dbf52
sha512: be8129045babb7371ef3922eece1635ae021eb9203b7239f4d2a71fbf8b322f908cc42362d7e0ef127be592e9c9b86362114c6dbcf508aaa6a435a18733f48ac
ssdeep: 192:XfvcBj7I1RGWJbDjOSl6Dt7E5pz6HJoZMb:ncx7IfjJXjDl27C
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B1123A83FE910973DF584BB82133926D8CBF67616B1363637BA7682A8A351D5E41204F
sha3_384: 4ddd91c48abb7913246f83160da6db25e681ec9c5951402b2bef8872cfe5fc40c4b3e79140d68ec80fa12463a06a3f2e
ep_bytes: e8c5030000e974feffff558bec6a00ff
timestamp: 2022-08-24 17:45:44

Version Info:
0: [No Data]

Generic.Exploit.Shellcode.3.08224A1F also known as:

Bkav	W32.AIDetect.malware2
Cynet	Malicious (score: 100)
FireEye	Generic.mg.5a5b60878f256c66
Cybereason	malicious.78f256
Cyren	W32/Rozena.BQ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Rozena.BIO.gen
ClamAV	Win.Trojan.MSShellcode-6360728-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	DeepScan:Generic.Exploit.Shellcode.3.08224A1F
MicroWorld-eScan	DeepScan:Generic.Exploit.Shellcode.3.08224A1F
Avast	Win32:ShikataGaNai-C [Trj]
Rising	Trojan.Meterpreter!8.E532 (TFE:5:hoZ9izGmEZI)
Ad-Aware	DeepScan:Generic.Exploit.Shellcode.3.08224A1F
Emsisoft	DeepScan:Generic.Exploit.Shellcode.3.08224A1F (B)
VIPRE	DeepScan:Generic.Exploit.Shellcode.3.08224A1F
Sophos	Generic ML PUA (PUA)
APEX	Malicious
GData	DeepScan:Generic.Exploit.Shellcode.3.08224A1F
Jiangmin	Trojan.Generic.gxifj
MAX	malware (ai score=85)
Arcabit	DeepScan:Generic.Exploit.Shellcode.3.08224A1F
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Acronis	suspicious
VBA32	BScope.Trojan.Wacatac
ALYac	DeepScan:Generic.Exploit.Shellcode.3.08224A1F
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Rozena.PL!tr
AVG	Win32:ShikataGaNai-C [Trj]

How to remove Generic.Exploit.Shellcode.3.08224A1F?

Generic.Exploit.Shellcode.3.08224A1F removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X