Categories: Malware

How to remove “Generic.Remcos.0FA5915E”?

The Generic.Remcos.0FA5915E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Remcos.0FA5915E virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Binary file triggered YARA rule
Yara detections observed in process dumps, payloads or dropped files

How to determine Generic.Remcos.0FA5915E?


File Info:
name: 137F21D1F8FDD5CFE866.mlwpath: /opt/CAPEv2/storage/binaries/8b6a909110ca907eb279cfb8f6db432af5564263e49c6982001b83fcffe04c07crc32: B2DA1EFDmd5: 137f21d1f8fdd5cfe86637368b526027sha1: a8bf076482b60609b77ee379bade5490b47267c8sha256: 8b6a909110ca907eb279cfb8f6db432af5564263e49c6982001b83fcffe04c07sha512: 30241d883e774ffe93a00712a9cca835817fa263354f0f08d8e813d48c29338ee3a17c272e19c9c6697442008efe274174956f511d10c042156b6dfacba5cf2assdeep: 12288:mX8/Vx65HCnDAByqulR1fZJQGs/Z87Rq:d/Vc5HCnDABMfZJQNZGtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D5A4AE01BAC2C072D57524340D2AF735DABCBD212935597B73EA1D6BFE30190A72A7B2sha3_384: 24cbea096fd61c6ac3a1757eb90160ef1084663384d3180bfd93841e5d459771597a5d11efb1e80216052bd387796f10ep_bytes: e85c040000e98efeffff558bec81ec24timestamp: 2023-04-20 17:02:08
Version Info:
0: [No Data]

Generic.Remcos.0FA5915E also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Remcos.m!c
Elastic	Windows.Trojan.Remcos
DrWeb	BackDoor.Remcos.361
MicroWorld-eScan	Generic.Remcos.0FA5915E
CAT-QuickHeal	Trojan.GenericRI.S30100141
Skyhigh	BehavesLike.Win32.Remcos.gh
McAfee	Remcos-FDQO!137F21D1F8FD
Cylance	unsafe
VIPRE	Generic.Remcos.0FA5915E
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0053ac2c1 )
BitDefender	Generic.Remcos.0FA5915E
K7GW	Trojan ( 0053ac2c1 )
Cybereason	malicious.1f8fdd
BitDefenderTheta	Gen:NN.ZexaF.36802.DCW@aaJBeAli
VirIT	Trojan.Win32.GenusT.DGEY
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Rescoms.B
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.Win32.Remcos.gen
Alibaba	Backdoor:Win32/Remcos.c0a24191
NANO-Antivirus	Trojan.Win32.Remcos.jvutof
SUPERAntiSpyware	Backdoor.Remcos/Variant
Avast	Win32:RATX-gen [Trj]
Rising	Backdoor.Remcos!1.BAC7 (CLASSIC)
Emsisoft	Generic.Remcos.0FA5915E (B)
F-Secure	Backdoor.BDS/Backdoor.Gen
Baidu	Win32.Trojan.Kryptik.awm
Zillya	Trojan.Rescoms.Win32.1346
TrendMicro	TROJ_GEN.R002C0DC524
FireEye	Generic.mg.137f21d1f8fdd5cf
Sophos	Mal/Remcos-B
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.Remcos.dup
Webroot	W32.Trojan.Remcos
Google	Detected
Avira	BDS/Backdoor.Gen
Antiy-AVL	Trojan[Backdoor]/Win32.Rescoms.b
Kingsoft	Win32.Troj.Agent.cks
Microsoft	Trojan:Win32/Remcos!ic
Xcitium	Malware@#1qns2eftb8frb
Arcabit	Generic.Remcos.0FA5915E
ViRobot	Trojan.Win.Z.Remcos.488448.AK
ZoneAlarm	HEUR:Backdoor.Win32.Remcos.gen
GData	Generic.Remcos.0FA5915E
Varist	W32/Agent.FZI.gen!Eldorado
AhnLab-V3	Backdoor/Win.Remcos.R579691
VBA32	Backdoor.Remcos
ALYac	Generic.Remcos.0FA5915E
MAX	malware (ai score=87)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DC524
Tencent	Malware.Win32.Gencirc.10bea999
Yandex	Trojan.Invader!AMZR7oRmcRY
Ikarus	Trojan-Spy.Remcos
MaxSecure	Trojan.Malware.9833444.susgen
Fortinet	W32/Rescoms.U!tr
AVG	Win32:RATX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Backdoor:Win/Remcos