Categories: Malware

Generic.GC.Downloader.27D297F2 removal guide

The Generic.GC.Downloader.27D297F2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.GC.Downloader.27D297F2 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Authenticode signature is invalid
Attempts to remove evidence of file being downloaded from the Internet
Operates on local firewall’s policies and settings
Anomalous binary characteristics

How to determine Generic.GC.Downloader.27D297F2?


File Info:
name: A0039FBC46F2E874F2E4.mlwpath: /opt/CAPEv2/storage/binaries/0c8a145ef290f597e21906ad6b5e5e7aeee460a65f11543f1a04a1a0d9286d10crc32: B35B893Fmd5: a0039fbc46f2e874f2e4151712993343sha1: 1fe1ef6bdd0b011d5778207a2481178c4ec748f1sha256: 0c8a145ef290f597e21906ad6b5e5e7aeee460a65f11543f1a04a1a0d9286d10sha512: 21d201e2bed5f5bc9cb75f57798dfc566c7a09eb32e606dae00d0a9e66c1a179447e7ffa7a2ca3f734e301b62c744928661310016b50f963d683d432a266797bssdeep: 768:Inu3jL7I9H/k+aI+G0au3+Z5vBhdpppppppppppppppppppppppppppppppppppH:Inu3jL7I9H/k+j+mW+Ptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17D444345E61E160468EE7764F247BF19AFF78D1306DDECC1D9CC194A6AEA882C72108Fsha3_384: d02c7390ddfaaf23b6040621d7e6b50ff4796425a256daeae4de81107f516a7b70e8684463be7707cdc3523891ea6bd3ep_bytes: 558bec6aff68403f400068382f400064timestamp: 2019-04-24 03:13:51
Version Info:
0: [No Data]

Generic.GC.Downloader.27D297F2 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Virus.Win32.Shodi.lzG3
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.Agent.Phorpiex
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Generic.GC.Downloader.27D297F2
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Genome.I.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Phorpiex.S
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Dropper.Win32.Phorpiex.a
Alibaba	TrojanDropper:Win32/Phorpiex.7fdc66eb
NANO-Antivirus	Trojan.Win32.Phorpiex.gjhxba
MicroWorld-eScan	Generic.GC.Downloader.27D297F2
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.116a85b1
Ad-Aware	Generic.GC.Downloader.27D297F2
Comodo	TrojWare.Win32.Phorpiex.CT@803ooe
Zillya	Worm.Phorpiex.Win32.1086
TrendMicro	TROJ_GEN.R002C0WG821
McAfee-GW-Edition	BehavesLike.Win32.Generic.dz
FireEye	Generic.mg.a0039fbc46f2e874
Emsisoft	Generic.GC.Downloader.27D297F2 (B)
SentinelOne	Static AI – Malicious PE
GData	Generic.GC.Downloader.27D297F2
Jiangmin	TrojanDropper.Phorpiex.a
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Generic.ASMalwS.2B57C09
Arcabit	Generic.GC.Downloader.27D297F2
Microsoft	Trojan:Win32/Occamy.C0C
AhnLab-V3	Malware/Win32.RL_Generic.R277920
Acronis	suspicious
McAfee	GenericRXAA-FA!A0039FBC46F2
VBA32	suspected of Trojan.Downloader.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0WG821
Rising	Spammer.Agent!1.B7D9 (CLASSIC)
Yandex	Trojan.GenAsa!uE2V2EBLvDk
Ikarus	Worm.Win32.Phorpiex
eGambit	Unsafe.AI_Score_91%
Fortinet	W32/Phorpiex.S!worm
BitDefenderTheta	Gen:NN.ZexaF.34062.quZ@aas2bMhi
AVG	Win32:Malware-gen
Cybereason	malicious.c46f2e
MaxSecure	Trojan.Malware.1728101.susgen