Malware

What is “Generic.Keylogger.6.AD446655 (B)”?

Malware Removal

The Generic.Keylogger.6.AD446655 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Keylogger.6.AD446655 (B) virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Unconventionial language used in binary resources: Turkish
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Attempts to restart the guest VM
  • Attempts to stop active services
  • Installs itself for autorun at Windows startup
  • Attempts to disable UAC
  • Attempts to modify or disable Security Center warnings
  • Anomalous binary characteristics

Related domains:

smtp.yandex.com

How to determine Generic.Keylogger.6.AD446655 (B)?


File Info:

crc32: 52E7AA8B
md5: adc12e7d45c5503da134068f979b3975
name: ADC12E7D45C5503DA134068F979B3975.mlw
sha1: 7328760d5472c6362f2e1f07a53edc48389d162c
sha256: 4d07cd0b0343b112bf1c6abf174937c82e613912ec0cabe8e4af7a86a15471e0
sha512: 3a6ec38986eb5d08a3c13c453715c08eadb8ab54bfa5e5ebae26ff78674ea2a4333980769400dc07d7e6b3f756fbc74ffdbdaeda0c1e4ee72736e3cb6fd393bd
ssdeep: 6144:kHlT1cACTfgjdtArT1cACTfgjdtALLqKoV8CT1cACTfgjdlAcn:g1kfgjdtAv1kfgjdtAkV8E1kfgjdlAcn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: mscvin
FileVersion: 16.00
CompanyName: Microsoft
ProductName: Microsoft
ProductVersion: 16.00
OriginalFilename: mscvin.exe
Translation: 0x0409 0x04b0

Generic.Keylogger.6.AD446655 (B) also known as:

BkavW32.AIDetectGBM.malware.02
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Keylogger.6.AD446655
ALYacGeneric.Keylogger.6.AD446655
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusSpyware ( 00442b511 )
K7GWSpyware ( 00442b511 )
CrowdStrikewin/malicious_confidence_80% (D)
BaiduWin32.Trojan-Spy.VB.e
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Spy.VB.NUB
APEXMalicious
ClamAVWin.Keylogger.1467fc-6842033-0
SUPERAntiSpywareHack.Tool/Gen-KeyLogger
RisingSpyware.VB!8.226 (TFE:dGZlOgSom4qQn0Tyqg)
Ad-AwareGeneric.Keylogger.6.AD446655
ComodoTrojWare.Win32.KeyLogger.Agent.NUB@7r3slo
F-SecureTrojan.TR/Dropper.Gen
VIPRETrojan.Win32.Generic!BT
TrendMicroTSPY_VBKLOG.SMIB
EmsisoftGeneric.Keylogger.6.AD446655 (B)
IkarusTrojan-Spy.Agent
JiangminTrojan.VB.axhg
AviraTR/Dropper.Gen
GridinsoftTrojan.Win32.Agent.vb!s1
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.VB.R230695
McAfeePUP-XGF-WC
MalwarebytesTrojan.KeyLogger
ZonerTrojan.Win32.86659
TrendMicro-HouseCallTSPY_VBKLOG.SMIB
TencentMalware.Win32.Gencirc.10b0bba8
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Generic.AC.40be89
Cybereasonmalicious.d45c55
PandaTrj/Genetic.gen

How to remove Generic.Keylogger.6.AD446655 (B)?

Generic.Keylogger.6.AD446655 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment