Generic.Mulinex.3D389B73 removal

The Generic.Mulinex.3D389B73 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Mulinex.3D389B73 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Mulinex.3D389B73?


File Info:
crc32: 5E132D90
md5: f2edf7115de9f8b89c71d28ab92b03ef
name: F2EDF7115DE9F8B89C71D28AB92B03EF.mlw
sha1: ee6722259a0a071eff4e932b59221fbb8f0939de
sha256: 6730bddb79e63ecfd13101368dbf964e3c4cac7d7d805dfcc546e9c268e55060
sha512: d9eaf5439ea6a6467ed99315b1597b85a0825102d31369bd0babeaf08e22fb01fcce345c608e98cd7d64ba37b58543617f9ab6a921e46e43c3c5b7e7a3e097da
ssdeep: 12288:By6ppCa40V2+Uq797+kA/86ZWn5tx5uU29cg+8hkBq:sa40V2dq7WyxQ4GhkBq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2021
InternalName: AAAA
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: Application AAAA
ProductVersion: 1, 0, 0, 1
FileDescription: Application MFC AAAA
OriginalFilename: AAAA.EXE
Translation: 0x040c 0x04b0

Generic.Mulinex.3D389B73 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
DrWeb	BackDoor.Spy.422
Cynet	Malicious (score: 100)
ALYac	DeepScan:Generic.Mulinex.3D389B73
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.1392332
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.15de9f
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	DeepScan:Generic.Mulinex.3D389B73
NANO-Antivirus	Trojan.Win32.Mlw.iuhemf
MicroWorld-eScan	DeepScan:Generic.Mulinex.3D389B73
Tencent	Malware.Win32.Gencirc.10ce4f6a
Ad-Aware	DeepScan:Generic.Mulinex.3D389B73
BitDefenderTheta	Gen:NN.ZexaF.34690.Lq0@aq!uYxpe
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	BKDR_ZEGOST.SM34
McAfee-GW-Edition	GenericRXOD-IK!F2EDF7115DE9
FireEye	Generic.mg.f2edf7115de9f8b8
Emsisoft	DeepScan:Generic.Mulinex.3D389B73 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.gvysy
Avira	HEUR/AGEN.1101570
Microsoft	Backdoor:Win32/Zegost.KM!MTB
Gridinsoft	Backdoor.Win32.AI.oa!s1
Arcabit	DeepScan:Generic.Mulinex.3D389B73
GData	DeepScan:Generic.Mulinex.3D389B73
AhnLab-V3	Backdoor/Win.Zegost.C4432905
Acronis	suspicious
McAfee	GenericRXOD-IK!F2EDF7115DE9
MAX	malware (ai score=81)
VBA32	BScope.Backdoor.Farfli
Malwarebytes	Malware.AI.1358604974
Panda	Trj/GdSda.A
TrendMicro-HouseCall	BKDR_ZEGOST.SM34
Rising	Backdoor.Farfli!8.B4 (C64:YzY0Ooxkx8JyrHm3)
Yandex	Trojan.Agent!az0iRg3/mf4
Ikarus	Backdoor.Win32.Zegost
MaxSecure	Trojan.Malware.117126885.susgen
AVG	Win32:Malware-gen

How to remove Generic.Mulinex.3D389B73?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.Mulinex.3D389B73 removal