Malware

Generic.Exploit.Shellcode.3.DFF34E65 removal tips

Malware Removal

The Generic.Exploit.Shellcode.3.DFF34E65 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Exploit.Shellcode.3.DFF34E65 virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Generic.Exploit.Shellcode.3.DFF34E65?


File Info:

crc32: 7F6D2654
md5: 5ca99048174c7f146b66df3c22a4f442
name: 5CA99048174C7F146B66DF3C22A4F442.mlw
sha1: 46e72a133805e3bef78b37d5ab33c179a8dee523
sha256: 4d7e2ee9388a9ee972f0c5d75f59edc3fd63f0cb9069e6c76d7070f625b6e045
sha512: 1de0990c64bc2b15ec16b3b66d1ad06fede1570eed258d3c6ad6c07c5e8d1791c210da8b18e6b6287e286c47db9266de45faeb23eb4f057f2210ef30ffbe3c7b
ssdeep: 768:IQvITazGoOjDaKc+gp6dJRt3cm6DtRIXwSGzyWbDwp1IrJPbXAuGDJ2q3:I8yQkDaZp6V3WtRPSYB8I6uGkq3
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Generic.Exploit.Shellcode.3.DFF34E65 also known as:

K7AntiVirusTrojan ( 004c49f81 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.GenericRI.S18206508
ALYacDeepScan:Generic.Exploit.Shellcode.3.DFF34E65
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Meterpreter.09eb4d05
K7GWTrojan ( 004c49f81 )
CyrenW32/Swrort.B.gen!Eldorado
SymantecPacked.Generic.347
ESET-NOD32a variant of Win32/Rozena.ED
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Trojan.Swrort-5710536-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Exploit.Shellcode.3.DFF34E65
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanDeepScan:Generic.Exploit.Shellcode.3.DFF34E65
TencentMalware.Win32.Gencirc.10b3f98b
Ad-AwareDeepScan:Generic.Exploit.Shellcode.3.DFF34E65
SophosML/PE-A + Mal/EncPk-ND
ComodoTrojWare.Win32.Rozena.A@4jwdqr
BitDefenderThetaGen:NN.ZexaF.34722.cmKfa4xqICli
TrendMicroBKDR_SWRORT.SM
McAfee-GW-EditionBehavesLike.Win32.Downloader.pc
FireEyeGeneric.mg.5ca99048174c7f14
EmsisoftDeepScan:Generic.Exploit.Shellcode.3.DFF34E65 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.ZPACK.Gen
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Meterpreter
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataDeepScan:Generic.Exploit.Shellcode.3.DFF34E65
AhnLab-V3Backdoor/Win32.Bifrose.R12476
Acronissuspicious
McAfeeArtemis!5CA99048174C
MAXmalware (ai score=89)
VBA32Trojan.Swrort
MalwarebytesTrojan.Rozena
PandaTrj/GdSda.A
TrendMicro-HouseCallBKDR_SWRORT.SM
RisingHackTool.Swrort!1.6477 (CLASSIC)
YandexTrojan.GenAsa!O0/tdGI4TGA
IkarusExploit.PDF
MaxSecureTrojan.Malware.300983.susgen
FortinetMalwThreat!df3bIV
AVGWin32:Evo-gen [Susp]
Paloaltogeneric.ml

How to remove Generic.Exploit.Shellcode.3.DFF34E65?

Generic.Exploit.Shellcode.3.DFF34E65 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment