Malware

Generic.Netsky.33189713 removal tips

Malware Removal

The Generic.Netsky.33189713 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Generic.Netsky.33189713 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Detected script timer window indicative of sleep style evasion
  • Attempts to connect to a dead IP:Port (10 unique times)
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • A process created a hidden window
  • Performs some HTTP requests
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Checks for the presence of known windows from debuggers and forensic tools
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

Related domains:

www.msn.com
www.bing.com
ocsp.pki.goog
ocsp.digicert.com
static-global-s-msn-com.akamaized.net

How to determine Generic.Netsky.33189713?


File Info:

crc32: 1BA4E901
md5: 25ec06d3e53fee8f6350fd4ebbf94f7f
name: 25EC06D3E53FEE8F6350FD4EBBF94F7F.mlw
sha1: 39d5fb7bfb24f913e5c9ac35159eb44ecd0e6ae6
sha256: 1e7a6218a571f18fd5044e08214a073fa126a25520f49e2a8ecf5c174d035a71
sha512: 2e06c9722ab07ca244263bc8f5f70a0f62dfea4b7a08f8cde85d4800e8a4ffaed87a73681ec8957ed27a053edabc82df38c82d13c826aeedd4acf4a95af3a2bb
ssdeep: 3072:NQOYU42HBk1GCNTJm/E1fd8Sa/edpVWIEXxOAg0FujYklwV/+LyXd:OP24f2NqAOUSoAy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Netsky.33189713 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0049cbee1 )
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
DrWebBACKDOOR.Trojan
MicroWorld-eScanGeneric.Netsky.33189713
ALYacGeneric.Netsky.33189713
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaWorm:Win32/Ariss.8abb1b92
K7GWTrojan ( 0049cbee1 )
Cybereasonmalicious.3e53fe
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Ariss.D
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
BitDefenderGeneric.Netsky.33189713
NANO-AntivirusTrojan.Win32.Zapchast.esprjb
TencentWin32.Worm.Ariss.Htcu
Ad-AwareGeneric.Netsky.33189713
SophosMal/Generic-S
ComodoMalware@#3qgrmd8fxamal
BitDefenderThetaGen:NN.ZexaF.34170.nyW@a4LyHvm
VIPREBehavesLike.Win32.Malware.ssc (mx-v)
FireEyeGeneric.mg.25ec06d3e53fee8f
EmsisoftGeneric.Netsky.33189713 (B)
SentinelOneStatic AI – Malicious PE
AviraVBS/Zapchast
Antiy-AVLTrojan/Win32.BTSGeneric
MicrosoftRansom:Win32/Aicat.A!ml
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataGeneric.Netsky.33189713
AhnLab-V3Malware/Win32.Generic.C2323715
MAXmalware (ai score=82)
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.96 (RDML:lfHFothOo2qtWkxxLno/6g)
YandexTrojan.GenAsa!5hygpuZXsRM
IkarusWorm.Win32.Ariss
FortinetW32/Ariss.D!worm
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Generic.Netsky.33189713?

Generic.Netsky.33189713 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment