Malware

How to remove “Generic.Exploit.Shellcode.3.37F073DB”?

Malware Removal

The Generic.Exploit.Shellcode.3.37F073DB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Exploit.Shellcode.3.37F073DB virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Generic.Exploit.Shellcode.3.37F073DB?


File Info:

crc32: 87951D1D
md5: 73780b5e8a1ea3d560674d59cf0479f2
name: 73780B5E8A1EA3D560674D59CF0479F2.mlw
sha1: 5d4e1c13988d0df339d84f9c0b2c17692d9b56f0
sha256: e10861f283b2c572145bf92fbf83e35799473cbe23b822a87a1e040ba30e7376
sha512: 094b850cab5ccab92af87529b7616c6400dcd1002ceee3ff088ccd3dd8a88f657167d8637fd8e14d7900ad13dee53bfcd8c7479204b1b1f26dbf96976475043f
ssdeep: 768:IztAnCgipIoSfDPgod5gg3x/ZZgofLC52+zhzOfZ62cRXjB+VWJdq3:IztbgipOfDPgKagh/Vu52CzkwFDfq3
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Generic.Exploit.Shellcode.3.37F073DB also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 004c49f81 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Swrort.A
ALYacGeneric.Exploit.Shellcode.3.37F073DB
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
K7GWTrojan ( 004c49f81 )
Cybereasonmalicious.e8a1ea
CyrenW32/Swrort.B.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Rozena.ZL
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Trojan.Swrort-5710536-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGeneric.Exploit.Shellcode.3.37F073DB
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGeneric.Exploit.Shellcode.3.37F073DB
TencentMalware.Win32.Gencirc.10b3f98b
Ad-AwareGeneric.Exploit.Shellcode.3.37F073DB
SophosMal/EncPk-ND
ComodoTrojWare.Win32.Rozena.A@4jwdqr
F-SecureTrojan.TR/Crypt.ULPM.Gen
BitDefenderThetaGen:NN.ZexaF.34654.cmKfayseVcki
VIPRETrojan.Win32.Swrort.B (v)
TrendMicroBackdoor.Win32.SWRORT.SMAL01
McAfee-GW-EditionBehavesLike.Win32.Virut.pc
FireEyeGeneric.mg.73780b5e8a1ea3d5
EmsisoftGeneric.Exploit.Shellcode.3.37F073DB (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.ULPM.Gen
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Meterpreter
ArcabitGeneric.Exploit.Shellcode.3.37F073DB
GDataGeneric.Exploit.Shellcode.3.37F073DB
AhnLab-V3Backdoor/Win32.Bifrose.R12476
Acronissuspicious
McAfeeSwrort.d
MAXmalware (ai score=85)
VBA32Trojan.Swrort
MalwarebytesTrojan.Rozena
PandaTrj/Genetic.gen
TrendMicro-HouseCallBackdoor.Win32.SWRORT.SMAL01
RisingTrojan.Crypto!8.364 (TFE:5:qRUE1u5wYD)
IkarusExploit.PDF
MaxSecureTrojan.Malware.300983.susgen
FortinetMalwThreat!df3bIV
AVGWin32:Evo-gen [Susp]
Qihoo-360HEUR/QVM11.1.3FD6.Malware.Gen

How to remove Generic.Exploit.Shellcode.3.37F073DB?

Generic.Exploit.Shellcode.3.37F073DB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment