Malware

Should I remove “Generic.Exploit.Shellcode.3.390DFDE0”?

Malware Removal

The Generic.Exploit.Shellcode.3.390DFDE0 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Exploit.Shellcode.3.390DFDE0 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Generic.Exploit.Shellcode.3.390DFDE0?


File Info:

crc32: F4A53683
md5: 03068728c54d1b0e2cc14819043deff8
name: 03068728C54D1B0E2CC14819043DEFF8.mlw
sha1: 463470aac0135a40e2bcc40d4b8827d0eafef695
sha256: 5d3afd413854edbdf7c5e1781a87349881f876dd655fb75a46c3659e304d3f88
sha512: 49e8b5d94f729b1e571b045ed72d2ccc4d2a48cad44208eb496c50ed20be387f86fd0b2c3a61b2d19c6be7accff0af4d6ad5d3b46b054d502f71cc723fbf9424
ssdeep: 1536:I6k5KuWbqT6QlxA5y5Yfmsa9OKA7Mb+KR0Nc8QsJq39:7k5f6qTS8qmX9Ol7e0Nc8QsC9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Generic.Exploit.Shellcode.3.390DFDE0 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 004c49f81 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Swrort.A
ALYacDeepScan:Generic.Exploit.Shellcode.3.390DFDE0
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004c49f81 )
Cybereasonmalicious.8c54d1
CyrenW32/Swrort.A.gen!Eldorado
SymantecPacked.Generic.347
ESET-NOD32a variant of Win32/Rozena.ED
APEXMalicious
AvastWin32:SwPatch [Wrm]
ClamAVWin.Trojan.Swrort-5710536-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Exploit.Shellcode.3.390DFDE0
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
ViRobotTrojan.Win32.Elzob.Gen
SUPERAntiSpywareTrojan.Backdoor-Shell
MicroWorld-eScanDeepScan:Generic.Exploit.Shellcode.3.390DFDE0
Ad-AwareDeepScan:Generic.Exploit.Shellcode.3.390DFDE0
SophosML/PE-A + Troj/Swrort-C
ComodoTrojWare.Win32.Rozena.A@4jwdqr
BitDefenderThetaGen:NN.ZexaF.34722.eq1@a883QVni
TrendMicroBKDR_SWRORT.SM
McAfee-GW-EditionBehavesLike.Win32.Swrort.lh
FireEyeGeneric.mg.03068728c54d1b0e
EmsisoftDeepScan:Generic.Exploit.Shellcode.3.390DFDE0 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Patched.Gen2
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Meterpreter.A
GridinsoftTrojan.Win32.Swrort.zv!s2
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataDeepScan:Generic.Exploit.Shellcode.3.390DFDE0
AhnLab-V3Trojan/Win32.Shell.R1283
Acronissuspicious
McAfeeSwrort.i
MAXmalware (ai score=82)
MalwarebytesTrojan.Rozena
PandaTrj/GdSda.A
TrendMicro-HouseCallBKDR_SWRORT.SM
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazqDjfYC2D8YCVeivEWH2IXn)
YandexTrojan.Rosena.Gen.1
IkarusTrojan.Win32.Swrort
MaxSecureTrojan.Malware.300983.susgen
FortinetMalwThreat!df3bIV
AVGWin32:SwPatch [Wrm]

How to remove Generic.Exploit.Shellcode.3.390DFDE0?

Generic.Exploit.Shellcode.3.390DFDE0 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment