Malware

How to remove “Generic.Keylogger.2.0A598581”?

Malware Removal

The Generic.Keylogger.2.0A598581 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Keylogger.2.0A598581 virus can do?

  • Executable code extraction
  • At least one process apparently crashed during execution
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Checks the system manufacturer, likely for anti-virtualization

Related domains:

z.whorecord.xyz
a.tomx.xyz
d.nxxxn.ga

How to determine Generic.Keylogger.2.0A598581?


File Info:

crc32: 5F47985A
md5: d6108c81f52e93a831e63b1e85bde99c
name: D6108C81F52E93A831E63B1E85BDE99C.mlw
sha1: 1ebad41f899a1e224ab4089357c98ec263ddb41e
sha256: 45053b43df060158553fa7d83d99a446965a16742aaa456c0bec675d3a035c92
sha512: ac7376728e5dd74727e6457dcef143ac57862d0ccc6641bd6175331898d3cedb5a01dbbf21d3d07c171a5806378fd46f7a1ac1da9f8ddc3f2c5755bb95346b29
ssdeep: 6144:Rv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:R4VOiF1WD7kE1dTYOi8V5u23zmWFy4
type: MS-DOS executable, MZ for MS-DOS

Version Info:

LegalCopyright: (C) 360.cn All Rights Reserved.
InternalName: LSPFix
FileVersion: 7, 1, 3, 1057
CompanyName: 360.cn
ProductName: 360x5b89x5168x536bx58eb
ProductVersion: 7, 1, 3, 1057
FileDescription: 360x5b89x5168x536bx58eb LSPx4feex590dx6a21x5757
OriginalFilename: LSPFix.EXE
Translation: 0x0804 0x04b0

Generic.Keylogger.2.0A598581 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebBackDoor.Farfli.96
ClamAVWin.Malware.Deepscan-9770175-0
FireEyeGeneric.mg.d6108c81f52e93a8
CAT-QuickHealTrojan.Magania.18692
McAfeeGenericRXDW-XG!A76BF80D9190
MalwarebytesBackdoor.Farfli
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 004c81771 )
BitDefenderDeepScan:Generic.Keylogger.2.0A598581
K7GWTrojan ( 004c81771 )
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderThetaGen:NN.ZexaF.34780.xm1@a0ZwYAnj
CyrenW32/S-6cc11623!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan-Banker.Win32.Banbra.wvay
MicroWorld-eScanDeepScan:Generic.Keylogger.2.0A598581
RisingBackdoor.Farfli!8.B4 (TFE:5:bL8vVvLdNzM)
Ad-AwareDeepScan:Generic.Keylogger.2.0A598581
SophosML/PE-A + Troj/AutoG-KB
ComodoTrojWare.Win32.Fusing.CF@5afr59
F-SecureTrojan.TR/Agent.fjrz
McAfee-GW-EditionGenericRXDW-XG!A76BF80D9190
EmsisoftDeepScan:Generic.Keylogger.2.0A598581 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.fjkle
AviraTR/Agent.fjrz
Antiy-AVLTrojan/Win32.SGeneric
MicrosoftBackdoor:Win32/PcClient
GridinsoftTrojan.Win32.PcClient.vb!s1
ArcabitDeepScan:Generic.Keylogger.2.0A598581
SUPERAntiSpywareBackdoor.PcClient/Variant
ZoneAlarmTrojan-Banker.Win32.Banbra.wvay
GDataDeepScan:Generic.Keylogger.2.0A598581
AhnLab-V3Malware/Win32.Generic.C2832100
Acronissuspicious
VBA32BScope.Trojan-GameThief.Magania
ZonerTrojan.Win32.80229
ESET-NOD32Win32/Farfli.BGG
TencentMalware.Win32.Gencirc.10b40de8
YandexTrojan.GenAsa!TUiWhMkZPf8
MAXmalware (ai score=83)
FortinetW32/Midie.26C0!tr
AVGWin32:Malware-gen
Cybereasonmalicious.1f52e9
Qihoo-360HEUR/QVM18.1.F243.Malware.Gen

How to remove Generic.Keylogger.2.0A598581?

Generic.Keylogger.2.0A598581 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment