Malware

How to remove “Generic.Remas.1.BCA51072”?

Malware Removal

The Generic.Remas.1.BCA51072 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Remas.1.BCA51072 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Detected script timer window indicative of sleep style evasion
  • A process attempted to delay the analysis task.
  • Starts servers listening on 0.0.0.0:5650, :0
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • A process created a hidden window
  • Unconventionial language used in binary resources: Russian
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Collects information to fingerprint the system
  • Uses suspicious command line tools or Windows utilities

Related domains:

rmansys.ru

How to determine Generic.Remas.1.BCA51072?


File Info:

crc32: 892B42AD
md5: acf3ffe4ef28ee077026078d3aef11be
name: skycheats.exe
sha1: 3e349d572a82b1df3bd61970640aa50ef6bbed78
sha256: cb37229f83a7f00da748cddb5fa77777c20dca45f3d92db247521af009307e29
sha512: 00715f0162e8490a743eb307be942373528347e5b9cdfa92b5ab63c16d03ebac2a3925b54e40ad3e7023b2b0b6f9ffb71f09d213b76b7fc7245bae24ebfd0b72
ssdeep: 98304:zK39YFcTEfSXfXjawNeqVLMxUFhPGXT461LsNMxa:zrcTEYxeywU/PuiOg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Remas.1.BCA51072 also known as:

MicroWorld-eScanGeneric.Remas.1.BCA51072
FireEyeGeneric.mg.acf3ffe4ef28ee07
Qihoo-360Win32/Trojan.Spy.6c4
CylanceUnsafe
ZillyaTrojan.Black.Win32.49471
SangforMalware
K7AntiVirusUnwanted-Program ( 004d38111 )
BitDefenderGeneric.Remas.1.BCA51072
K7GWUnwanted-Program ( 004d38111 )
Cybereasonmalicious.4ef28e
TrendMicroPUA_RADMIN
BitDefenderThetaGen:NN.ZexaF.34104.T10bam4AZIjk
F-ProtW32/S-2a54069b!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32BAT/RA-based.CX
BaiduMulti.Threats.InArchive
TrendMicro-HouseCallPUA_RADMIN
AvastOther:Malware-gen [Trj]
ClamAVWin.Malware.Agent-6365383-0
GDataWin32.Riskware.RemoteAdmin.E
KasperskyHEUR:Trojan.Win32.Generic
AlibabaBackdoor:Win32/Remapusy.d2e6b571
NANO-AntivirusTrojan.Script.RMS.enpelx
EmsisoftGeneric.Remas.1.BCA51072 (B)
ComodoTrojWare.REG.Rabased.ED@7px9ha
DrWebBAT.Radmin.15
VIPRETrojan.Win32.Generic!BT
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
Trapminemalicious.high.ml.score
SophosRemote Manipulator System (PUA)
APEXMalicious
CyrenW32/S-2a54069b!Eldorado
JiangminRemoteAdmin.RMS.w
AviraBDS/Backdoor.Gen2
Antiy-AVLRiskWare[RemoteAdmin]/Win32.RMS
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1DC7277
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Vigorf.A
McAfeeArtemis!ACF3FFE4EF28
MAXmalware (ai score=100)
VBA32Backdoor.RMS
MalwarebytesRiskWare.RemoteAdmin
PandaTrj/CI.A
RisingTrojan.Kryptik!1.B2F2 (CLOUD)
YandexTrojan.InstallRadmin.B
IkarusTrojan.BAT.RA
FortinetBAT/RAbased.CX!tr
AVGOther:Malware-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Generic.Remas.1.BCA51072?

Generic.Remas.1.BCA51072 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment