Malware

What is “Generic.Keylogger.2.95BE1B28”?

Malware Removal

The Generic.Keylogger.2.95BE1B28 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Keylogger.2.95BE1B28 virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Generic.Keylogger.2.95BE1B28?


File Info:

name: BBFC10D0D4005C1DBFA7.mlw
path: /opt/CAPEv2/storage/binaries/1b9790e5774879355030888d44651b50da91197b614f6beac5c29225ccc59527
crc32: 60035071
md5: bbfc10d0d4005c1dbfa7f1d0344dd976
sha1: 71e9952f0379c1cfce068624d12891d89d8413c6
sha256: 1b9790e5774879355030888d44651b50da91197b614f6beac5c29225ccc59527
sha512: fc36ca4853a6032fccdfcef086387c9ed940280ad6deb2689af6e069b4816ca39c40e0baa5bf8afd73607a9e7da87335feba268bf9544473469fa04745fd830d
ssdeep: 12288:/+Mhgdjf1Png+/Sjz9aTb7kJ428zbOOTBzxx+B9MdRIcTEpQLw/RKDBFTBv:tET1PrSj5sbi4bH3fQEAl5sBFTV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T149058E22F2805673CD2A17358C3B8A655A35BFD02E38590E37ED3E5C6E7B6827D191C2
sha3_384: 5f680c814f00582458c3b3f298d36775900e9feff525cde0a77446df4ec88717792eed2a90d3b459b7a7e5d37fa9c4ab
ep_bytes: e922fc03000000000052e9c7fb030050
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Generic.Keylogger.2.95BE1B28 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Hupigon.l566
DrWebBackDoor.Pigeon1.12496
MicroWorld-eScanGeneric.Keylogger.2.95BE1B28
ClamAVWin.Trojan.Hupigon-9883514-0
FireEyeGeneric.mg.bbfc10d0d4005c1d
CAT-QuickHealBackdoor.Hupigon.20797
McAfeeGenericRXEN-TF!BBFC10D0D400
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a81c81 )
AlibabaBackdoor:Win32/Hupigon.f9549ae2
K7GWTrojan ( 005a81c81 )
Cybereasonmalicious.0d4005
BitDefenderThetaGen:NN.ZelphiF.36318.ZKW@aeEgF@lj
VirITBackdoor.Win32.Hupigon6.ITC
CyrenW32/Downloader.C.gen!Eldorado
SymantecSMG.Heur!gen
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Hupigon
APEXMalicious
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Hupigon.sqck
BitDefenderGeneric.Keylogger.2.95BE1B28
SUPERAntiSpywareTrojan.Agent/Gen-Hupigon
AvastWin32:BackdoorX-gen [Trj]
TencentBackdoor.Win32.Hupigon.aan
EmsisoftGeneric.Keylogger.2.95BE1B28 (B)
F-SecureBackdoor.BDS/Hupigon.Gen
BaiduWin32.Trojan.Hupigon.a
VIPREGeneric.Keylogger.2.95BE1B28
TrendMicroPAK_Xed-21
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
Trapminemalicious.high.ml.score
SophosMal/Hupigon-I
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.5F963Z
AviraBDS/Hupigon.Gen
Antiy-AVLTrojan[Backdoor]/Win32.Hupigon.sqck
ArcabitGeneric.Keylogger.2.95BE1B28
ViRobotTrojan.Win.Z.Hupigon.843776.BIQ
ZoneAlarmBackdoor.Win32.Hupigon.sqck
MicrosoftBackdoor:Win32/Hupigon.ZAP!bit
GoogleDetected
AhnLab-V3Backdoor/Win32.Hupigon.R97644
Acronissuspicious
VBA32MalwareScope.Trojan-PSW.Game.16
ALYacGeneric.Keylogger.2.95BE1B28
MAXmalware (ai score=86)
Cylanceunsafe
PandaGeneric Malware
TrendMicro-HouseCallPAK_Xed-21
RisingTrojan.KillAV!1.9D95 (CLASSIC)
YandexTrojan.GenAsa!CWF8oQb0wJs
IkarusBackdoor.Win32.Hupigon
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Wacatac.B!tr
AVGWin32:BackdoorX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Generic.Keylogger.2.95BE1B28?

Generic.Keylogger.2.95BE1B28 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment