Malware

Generic.Exploit.Shellcode.3.A0A36DC2 removal tips

Malware Removal

The Generic.Exploit.Shellcode.3.A0A36DC2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.Exploit.Shellcode.3.A0A36DC2 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Anomalous binary characteristics

How to determine Generic.Exploit.Shellcode.3.A0A36DC2?



File Info:

crc32: 0F425BFE
md5: c337c462384278b7ba4f367b76c8422a
name: C337C462384278B7BA4F367B76C8422A.mlw
sha1: 397badefdbfd91e21247f7e00f94370aa06730de
sha256: 06e87733a1756f60b43903bfb0fcdd56e3d9ef0957beed374e5a82f3e19cf898
sha512: 95202b5499bbdd7933547940912460c6761f37f28062220534048f0b1d0592afbc648cd5de8bbf999e8579ae948a455eff9d3f992e794b408e1c8352f12ff0b1
ssdeep: 12288:ilu6wXs9aYT1kUCI3n2JTMl5+M5yH1f+uTy/Wcfz3pLeYRqt6y/TM+UNAiK7qYi:PKmO3Dv0TOeYAkfYil1bnT36icp
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Generic.Exploit.Shellcode.3.A0A36DC2 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0012c6871 )
Elasticmalicious (high confidence)
DrWebTrojan.Packed.196
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.S1559271
ALYacDeepScan:Generic.Exploit.Shellcode.3.A0A36DC2
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Meterpreter.8683e6ad
K7GWTrojan ( 0012c6871 )
Cybereasonmalicious.238427
CyrenW32/S-123d852a!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Rozena.ED
ZonerTrojan.Win32.104277
APEXMalicious
AvastFileRepMetagen [Malware]
ClamAVWin.Exploit.Alpha_Upper-1
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Exploit.Shellcode.3.A0A36DC2
MicroWorld-eScanDeepScan:Generic.Exploit.Shellcode.3.A0A36DC2
TencentWin32.Trojan.Generic.Svqt
Ad-AwareDeepScan:Generic.Exploit.Shellcode.3.A0A36DC2
SophosML/PE-A + ATK/Swrort-CA
ComodoTrojWare.Win32.Rozena.QR@8esbvx
BitDefenderThetaGen:NN.ZexaF.34738.av0@au!sVibi
TrendMicroTROJ_GEN.R005C0DF821
McAfee-GW-EditionBehavesLike.Win32.Backdoor.tz
FireEyeGeneric.mg.c337c462384278b7
EmsisoftDeepScan:Generic.Exploit.Shellcode.3.A0A36DC2 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.eezqm
WebrootW32.Malware.Gen
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_100%
MicrosoftTrojan:Win32/Meterpreter.A
GridinsoftRisk.Win32.Gen.sb!s1
ArcabitDeepScan:Generic.Exploit.Shellcode.3.A0A36DC2
GDataDeepScan:Generic.Exploit.Shellcode.3.A0A36DC2
AhnLab-V3Trojan/Win32.Swrort.C695042
Acronissuspicious
McAfeeGenericRXLH-UO!C337C4623842
MAXmalware (ai score=85)
MalwarebytesGeneric.Trojan.Obfuscator.DDS
TrendMicro-HouseCallTROJ_GEN.R005C0DF821
RisingTrojan.Generic@ML.100 (RDML:mTIZLp62R4p/cVdwZqrOpw)
IkarusTrojan.Win32.Rozena
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Rozena.TT!tr
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml

How to remove Generic.Exploit.Shellcode.3.A0A36DC2?

Generic.Exploit.Shellcode.3.A0A36DC2 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment