Malware

How to remove “Generic.Exploit.Shellcode.3.246E4B4C”?

Malware Removal

The Generic.Exploit.Shellcode.3.246E4B4C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Exploit.Shellcode.3.246E4B4C virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings

How to determine Generic.Exploit.Shellcode.3.246E4B4C?


File Info:

crc32: BF94412E
md5: 80304924eb1e2360267681a0964a7675
name: 80304924EB1E2360267681A0964A7675.mlw
sha1: bd725c210e4883fdb3e8579419d572aec5fd425e
sha256: 688d9702ef36796ffd5f3dd75571716aaf8a857b52e16ca3cf32cc6d2760d5fa
sha512: 20b559bb250ad3e91ee45912546e3605002e054ffbd45aa0c5d1f0277ecf4fbfe95185937d03aebd0b61a1057e86cb77bc7087302299f388c6526123a142b7ee
ssdeep: 1536:IyG02F1efmNG0W6e6hLCT7Weusnz2L67Mb+KR0Nc8QsJq39:orMzse6hLKWe1i67e0Nc8QsC9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Generic.Exploit.Shellcode.3.246E4B4C also known as:

BkavW32.FamVT.RorenNHc.Trojan
K7AntiVirusTrojan ( 004c49f81 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Swrort.A
ALYacDeepScan:Generic.Exploit.Shellcode.3.246E4B4C
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004c49f81 )
Cybereasonmalicious.4eb1e2
CyrenW32/Swrort.A.gen!Eldorado
SymantecPacked.Generic.347
ESET-NOD32a variant of Win32/Rozena.CP
APEXMalicious
AvastWin32:ShikataGaNai-E [Trj]
ClamAVWin.Trojan.MSShellcode-6360728-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Exploit.Shellcode.3.246E4B4C
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
ViRobotTrojan.Win32.Elzob.Gen
MicroWorld-eScanDeepScan:Generic.Exploit.Shellcode.3.246E4B4C
TencentTrojan.Win32.Cryptz.za
Ad-AwareDeepScan:Generic.Exploit.Shellcode.3.246E4B4C
SophosML/PE-A + Mal/EncPk-ACE
ComodoTrojWare.Win32.Rozena.A@4jwdqr
BitDefenderThetaGen:NN.ZexaF.34170.eq1@aKegrlni
TrendMicroBKDR_SWRORT.SM
McAfee-GW-EditionBehavesLike.Win32.Swrort.lh
FireEyeGeneric.mg.80304924eb1e2360
EmsisoftDeepScan:Generic.Exploit.Shellcode.3.246E4B4C (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Patched.Gen2
eGambitUnsafe.AI_Score_96%
MicrosoftTrojan:Win32/Meterpreter.O
GridinsoftTrojan.Win32.Swrort.zv!s2
SUPERAntiSpywareTrojan.Backdoor-Shell
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataDeepScan:Generic.Exploit.Shellcode.3.246E4B4C
AhnLab-V3Trojan/Win32.Shell.R1283
Acronissuspicious
McAfeeSwrort.i
MAXmalware (ai score=83)
MalwarebytesTrojan.Rozena
TrendMicro-HouseCallBKDR_SWRORT.SM
RisingHackTool.Swrort!1.6477 (CLASSIC)
YandexTrojan.Rosena.Gen.1
IkarusTrojan.Win32.Swrort
MaxSecureTrojan.Malware.121218.susgen
FortinetMalwThreat!0971IV
AVGWin32:ShikataGaNai-E [Trj]

How to remove Generic.Exploit.Shellcode.3.246E4B4C?

Generic.Exploit.Shellcode.3.246E4B4C removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment