Malware

Generic.Exploit.Shellcode.3.1A075F4B malicious file

Malware Removal

The Generic.Exploit.Shellcode.3.1A075F4B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Exploit.Shellcode.3.1A075F4B virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Generates some ICMP traffic

How to determine Generic.Exploit.Shellcode.3.1A075F4B?


File Info:

crc32: 0B9B23C4
md5: 3c09dba94bc3f0f500ab39c7772d8339
name: 3C09DBA94BC3F0F500AB39C7772D8339.mlw
sha1: 71fba8a360c257110b0c5273bbdbe972cbcb6cde
sha256: e4e2bab0643e7edb7192be108b243b5d140e9ea5ab23b7ca696659d87b64adc9
sha512: e0ba990c3241df776ea3498b2945b1723f6cbaadae2143f89fb7dc2dc5486c6be60f61ff60cb036b9aecb903a402db880f1d5251af6fc57f3162876ba12d8dcc
ssdeep: 768:IPS1mfwm7YsqBAIhVXDVEAjFtwNJRnUr46F164K3uHby2/aRqCQljF0hSq3:IHfwmEsqiIXD+AuUr5bZPHby2/aRqvj
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Generic.Exploit.Shellcode.3.1A075F4B also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 004c49f81 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.GenericRI.S18206508
ALYacDeepScan:Generic.Exploit.Shellcode.3.1A075F4B
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Meterpreter.8882932d
K7GWTrojan ( 004c49f81 )
Cybereasonmalicious.94bc3f
CyrenW32/Swrort.B.gen!Eldorado
SymantecPacked.Generic.347
ESET-NOD32a variant of Win32/Rozena.ED
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Trojan.Swrort-5710536-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Exploit.Shellcode.3.1A075F4B
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanDeepScan:Generic.Exploit.Shellcode.3.1A075F4B
TencentMalware.Win32.Gencirc.10b3f98b
Ad-AwareDeepScan:Generic.Exploit.Shellcode.3.1A075F4B
SophosML/PE-A + Mal/EncPk-ND
ComodoTrojWare.Win32.Rozena.A@4jwdqr
BitDefenderThetaGen:NN.ZexaF.34722.cmKfaCGY3ngi
TrendMicroBKDR_SWRORT.SM
McAfee-GW-EditionSwrort.d
FireEyeGeneric.mg.3c09dba94bc3f0f5
EmsisoftDeepScan:Generic.Exploit.Shellcode.3.1A075F4B (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Swrort.Gen
AviraTR/Crypt.ZPACK.Gen
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Meterpreter
GDataDeepScan:Generic.Exploit.Shellcode.3.1A075F4B
AhnLab-V3Backdoor/Win32.Bifrose.R12476
Acronissuspicious
McAfeeArtemis!3C09DBA94BC3
MAXmalware (ai score=88)
VBA32Trojan.Swrort
MalwarebytesTrojan.Rozena
PandaTrj/GdSda.A
TrendMicro-HouseCallBKDR_SWRORT.SM
RisingHackTool.Swrort!1.6477 (CLASSIC)
YandexTrojan.GenAsa!O0/tdGI4TGA
IkarusExploit.PDF
MaxSecureTrojan.Malware.300983.susgen
FortinetMalwThreat!df3bIV
AVGWin32:Evo-gen [Susp]
Paloaltogeneric.ml

How to remove Generic.Exploit.Shellcode.3.1A075F4B?

Generic.Exploit.Shellcode.3.1A075F4B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment