Generic.Keylogger.2.04F55503 removal

Malware Removal

The Generic.Keylogger.2.04F55503 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What Generic.Keylogger.2.04F55503 virus can do?

  • Executable code extraction
  • At least one process apparently crashed during execution
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Drops a binary and executes it
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Creates a copy of itself

Related domains:

d.nxxxn.ga
r.pengyou.com

How to determine Generic.Keylogger.2.04F55503?


File Info:

crc32: 8D52FEBF
md5: 602e56b8b82832ccb0e0d9b49cff6e8f
name: SQLSernsf.exe
sha1: fd4b847143de5774fe16ec9c6f95392ef5343fb2
sha256: cd3c57b3dfd29de855291754444aa6de59817ecdb8cd51a572bb41a644145046
sha512: ac25ecf020d458d0317b7f44ed33d42366574a630ff9acad02f66793cb4da4063a3a688057f87adf9b22d7b87304fa7ac2dc855ef33460f27f52db5a10391af5
ssdeep: 6144:8v5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:84VOiF1WD7kE1dTYOi8V5u23zmWFy4
type: MS-DOS executable, MZ for MS-DOS

Version Info:

LegalCopyright: (C) 360.cn All Rights Reserved.
InternalName: LSPFix
FileVersion: 7, 1, 3, 1057
CompanyName: 360.cn
ProductName: 360x5b89x5168x536bx58eb
ProductVersion: 7, 1, 3, 1057
FileDescription: 360x5b89x5168x536bx58eb LSPx4feex590dx6a21x5757
OriginalFilename: LSPFix.EXE
Translation: 0x0804 0x04b0

Generic.Keylogger.2.04F55503 also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanDeepScan:Generic.Keylogger.2.04F55503
FireEyeGeneric.mg.602e56b8b82832cc
CAT-QuickHealTrojan.Magania.18692
McAfeeGenericRXDW-XG!A5D13A7C9BA4
MalwarebytesBackdoor.Farfli
SangforMalware
K7AntiVirusTrojan ( 004c81771 )
BitDefenderDeepScan:Generic.Keylogger.2.04F55503
K7GWTrojan ( 004c81771 )
Cybereasonmalicious.8b8283
Invinceaheuristic
BitDefenderThetaGen:NN.ZexaF.34100.xm1@aW@z3!ej
CyrenW32/Trojan.TYMB-2812
SymantecML.Attribute.HighConfidence
GDataDeepScan:Generic.Keylogger.2.04F55503
KasperskyTrojan.Win32.Agent.xabxmr
TencentMalware.Win32.Gencirc.10b40de8
Ad-AwareDeepScan:Generic.Keylogger.2.04F55503
ComodoTrojWare.Win32.Fusing.CF@5afr59
F-SecureHeuristic.HEUR/AGEN.1042577
DrWebBackDoor.Farfli.96
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericRXDW-XG!A5D13A7C9BA4
SentinelOneDFI – Malicious PE
Trapminemalicious.high.ml.score
CMCVirus.Win32.Sality!O
APEXMalicious
F-ProtW32/S-6cc11623!Eldorado
JiangminBackdoor.Farfli.cmb
MaxSecureTrojan.Malware.300983.susgen
AviraHEUR/AGEN.1042577
Endgamemalicious (high confidence)
ArcabitDeepScan:Generic.Keylogger.2.04F55503
SUPERAntiSpywareBackdoor.PcClient/Variant
ZoneAlarmTrojan.Win32.Agent.xabxmr
MicrosoftBackdoor:Win32/PcClient.ZR
AhnLab-V3Malware/Win32.Generic.C2832100
Acronissuspicious
VBA32BScope.Trojan-GameThief.Magania
ALYacDeepScan:Generic.Keylogger.2.04F55503
MAXmalware (ai score=88)
CylanceUnsafe
ZonerTrojan.Win32.80229
ESET-NOD32Win32/Farfli.BGG
RisingBackdoor.Farfli!8.B4 (RDMK:cmRtazoJHLefJTV3aHmMFgnxDiS8)
YandexTrojan.PWS.Banbra!fVil7drZyCo
IkarusTrojan.Win32.Farfli
FortinetW32/Midie.26C0!tr
WebrootW32.Trojan.Gen
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360HEUR/QVM18.1.0E73.Malware.Gen

How to remove Generic.Keylogger.2.04F55503?

Generic.Keylogger.2.04F55503 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment