Generic.Remcos.F98B0B7E (file analysis)

The Generic.Remcos.F98B0B7E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Remcos.F98B0B7E virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
A process attempted to delay the analysis task.
Sniffs keystrokes

Related domains:

z.whorecord.xyz

a.tomx.xyz

Officialsw.chickenkiller.com

official.ydns.eu

hurricane.ydns.eu

How to determine Generic.Remcos.F98B0B7E?


File Info:
crc32: 8265C70E
md5: 23623affe6ef20007d522336e1c0ac4a
name: 23623AFFE6EF20007D522336E1C0AC4A.mlw
sha1: 86c3804bf412b46d9750dd4170a457c45aa205fd
sha256: 44c6c52e9603abc8dc2461c1fcb15cd875063ac11024a10d0e16c0cdb5edee04
sha512: d752616dff783709b3413a68c079c1a9320c1f7e8503cbee6e2c6724e9bc8c2899ab04b4f923151d5bc3d8ea359421a1e9570cc025710ed2adf7eb22c47cab22
ssdeep: 12288:wYe6UWhaT5xnDdLv9rX+1jZJqxE/ZjEcyib:m6UWUT5xDN9IjZJsCZ3yg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Generic.Remcos.F98B0B7E also known as:

K7AntiVirus	Trojan ( 0053ba121 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen14.55704
Cynet	Malicious (score: 100)
ALYac	DeepScan:Generic.Remcos.F98B0B7E
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.1460119
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 0053ba121 )
Cybereason	malicious.fe6ef2
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Rescoms.B
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
ClamAV	Win.Trojan.Remcos-9753190-0
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	DeepScan:Generic.Remcos.F98B0B7E
MicroWorld-eScan	DeepScan:Generic.Remcos.F98B0B7E
Tencent	Malware.Win32.Gencirc.10cec31d
Ad-Aware	DeepScan:Generic.Remcos.F98B0B7E
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34126.CCW@ayH3r6ai
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gh
FireEye	Generic.mg.23623affe6ef2000
Emsisoft	DeepScan:Generic.Remcos.F98B0B7E (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.halxu
Avira	HEUR/AGEN.1141389
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.3458D2D
Microsoft	Backdoor:Win32/Remcos.GA!MTB
Gridinsoft	Backdoor.Win32.Remcos.oa!s1
Arcabit	DeepScan:Generic.Remcos.F98B0B7E
GData	Win32.Malware.Bucaspys.B
AhnLab-V3	Trojan/Win.RemcosRAT.R418128
McAfee	Trojan-FTRG!23623AFFE6EF
MAX	malware (ai score=88)
VBA32	BScope.Backdoor.Remcos
Malwarebytes	Backdoor.Remcos
Panda	Trj/GdSda.A
Rising	Backdoor.Remcos!1.B6A7 (CLASSIC)
Yandex	Trojan.Agent!wQ4Wbnu/ODE
Ikarus	Trojan.Win32.Rescoms
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Rescoms.M!tr
AVG	Win32:RATX-gen [Trj]

How to remove Generic.Remcos.F98B0B7E?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.Remcos.F98B0B7E (file analysis)