Generic.Malware.GFW!wre!Xh.3B31AFC7 information

The Generic.Malware.GFW!wre!Xh.3B31AFC7 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Malware.GFW!wre!Xh.3B31AFC7 virus can do?

Possible date expiration check, exits too soon after checking local time
Attempts to connect to a dead IP:Port (255 unique times)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Malware.GFW!wre!Xh.3B31AFC7?


File Info:
crc32: 8A78CAF4
md5: 830ffb393ba8cca073a1c0b66af78de5
name: 830FFB393BA8CCA073A1C0B66AF78DE5.mlw
sha1: 26fd142ed7a2bc7bb5d249ee88ee93becf45672b
sha256: 6c62b768d8b22888724288af038bc0b6e55280ddbbe42a436cdf68889346df18
sha512: 14af6d6c2be92dfdd23fc25845a49faf2d317b75146583518de5511bd8c7be9a048d7f26d01659cf68b9fe561188c5f886ddf4650c4c26ed185b15db7d926e5d
ssdeep: 49152:c8dgSDqBqrci8PXdzCPabd+aCUzLUhLpW5If7Z:c8dXDqor18PNzCPabTnzLUhLpWa7Z
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:
0: [No Data]

Generic.Malware.GFW!wre!Xh.3B31AFC7 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Eb.4!c
Elastic	malicious (high confidence)
ALYac	DeepScan:Generic.Malware.GFW!wre!Xh.3B31AFC7
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	DeepScan:Generic.Malware.GFW!wre!Xh.3B31AFC7
K7GW	Trojan ( 00577d6f1 )
Cybereason	malicious.93ba8c
Cyren	W32/RanumBot.P.gen!Eldorado
ESET-NOD32	a variant of WinGo/RanumBot.U
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Exploit:Win32/RanumBot.678b97ef
MicroWorld-eScan	DeepScan:Generic.Malware.GFW!wre!Xh.3B31AFC7
Tencent	Win32.Exploit.Ms17-010.Dwtb
Ad-Aware	DeepScan:Generic.Malware.GFW!wre!Xh.3B31AFC7
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.vc
FireEye	Generic.mg.830ffb393ba8cca0
Emsisoft	DeepScan:Generic.Malware.GFW!wre!Xh.3B31AFC7 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Eb.vz
Webroot	W32.Trojan.Gen
Antiy-AVL	Trojan/Generic.ASBOL.C687
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Trickbot!ml
Arcabit	DeepScan:Generic.Malware.GFW!wre!Xh.3B31AFC7
GData	DeepScan:Generic.Malware.GFW!wre!Xh.3B31AFC7
McAfee	Artemis!830FFB393BA8
MAX	malware (ai score=89)
Panda	Trj/RnkBend.A
Ikarus	Trojan.Win32.Ranumbot
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/RanumBot.U!tr
Paloalto	generic.ml

How to remove Generic.Malware.GFW!wre!Xh.3B31AFC7?

Generic.Malware.GFW!wre!Xh.3B31AFC7 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.Malware.GFW!wre!Xh.3B31AFC7 information