What is “Generic.PySpy.A.D6871361”?

The Generic.PySpy.A.D6871361 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.PySpy.A.D6871361 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Dynamic (imported) function loading detected
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Anomalous file deletion behavior detected (10+)
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Created a process from a suspicious location
• CAPE detected the PyInstaller malware family

How to determine Generic.PySpy.A.D6871361?

File Info:
name: CEB104FA803E2F3E029C.mlw
path: /opt/CAPEv2/storage/binaries/92911aff3502b2a6430d8cf8544008943c9dea97fcaf13f5bf4f7ed6820b431b
crc32: 55F06D0B
md5: ceb104fa803e2f3e029ce35feeb2976b
sha1: 6e5b8b0b65f98381cf0d0117ff7ef79163689836
sha256: 92911aff3502b2a6430d8cf8544008943c9dea97fcaf13f5bf4f7ed6820b431b
sha512: 6fa7d51e6fb1cc79a145a26ea3b652b6d4727455e2164f4ab22c441024230e24e265b7521b02b3c765b5f3aebd95c17f4a1599a1f422ffaf5251ba5f85f9a6ab
ssdeep: 196608:ckoEbGXVFICteEroXxoczlxZV3Gu5D4S26/CS39t6TRA9/xAH8:MEeInEroXF14S26dt66nP
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T193663310B6E808FEE9BB847AC868C435C1B2B4214390D56F27ECD95B5FA76E17D39B40
sha3_384: 9cae63c8d042f2198224bf6e4daf59fdcbec04afaf017eef7beef40cb3bddced2ee2b20a400ee2b3803cc605a218e952
ep_bytes: 4883ec28e8f70400004883c428e972fe
timestamp: 2021-11-09 18:03:59

Version Info:
0: [No Data]

Generic.PySpy.A.D6871361 also known as:

How to remove Generic.PySpy.A.D6871361?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.