Categories: Malware

How to remove “Generic.ShellCode.Marte.H.89A65F37”?

The Generic.ShellCode.Marte.H.89A65F37 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ShellCode.Marte.H.89A65F37 virus can do?

Sample contains Overlay data
Performs HTTP requests potentially not found in PCAP.
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.ShellCode.Marte.H.89A65F37?


File Info:
name: 067DAF2FAFC65D032921.mlwpath: /opt/CAPEv2/storage/binaries/bd06884004f98963e1ba3b53028d538b2da5270b4daced0e7a609638bcee5f65crc32: 938002BFmd5: 067daf2fafc65d032921b02caedd7d5bsha1: a30e0ea1b5a67f9517c871dc1bc20f1517cda6d4sha256: bd06884004f98963e1ba3b53028d538b2da5270b4daced0e7a609638bcee5f65sha512: 84da3381dd877c52b89b71df104310dc2bddc92ede955fe7d0915863db3cf68a26d6a9e0f706bf783f40130e13b982827d6bf5a952895776716b6b46fc5df39bssdeep: 384:dA8AuVIWlddyqoWBUZNoZao+1sqn6Ud+vgP4ndtQiXbaB0fETvf:gspddRZo/OvgAvpbmtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T131F2D4D87DA55DD6EA01527EA5F7C2266B3CF0E087034B83763076394B13AD23AE524Bsha3_384: cf2fc61219468f4feddf0de8699905c764cab96a3d6c9a1c3d611b67f1ac446c5db8158a7303781af5288b157f471690ep_bytes: 83ec1cc7042401000000ff1508714000timestamp: 1970-03-16 08:04:02
Version Info:
0: [No Data]

Generic.ShellCode.Marte.H.89A65F37 also known as:

Lionic	Trojan.Win32.Cometer.4!c
MicroWorld-eScan	DeepScan:Generic.ShellCode.Marte.H.89A65F37
ClamAV	Win.Trojan.MSShellcode-6360730-0
ALYac	DeepScan:Generic.ShellCode.Marte.H.89A65F37
Malwarebytes	Generic.Malware/Suspicious
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_70% (D)
Symantec	Hacktool
ESET-NOD32	a variant of Win32/Rozena.BMG
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	DeepScan:Generic.ShellCode.Marte.H.89A65F37
NANO-Antivirus	Trojan.Win32.Cometer.fmqlwb
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Generic.Qsmw
Emsisoft	DeepScan:Generic.ShellCode.Marte.H.89A65F37 (B)
F-Secure	Trojan.TR/Meterpreter.cnyzq
VIPRE	DeepScan:Generic.ShellCode.Marte.H.89A65F37
McAfee-GW-Edition	Packed-SC!067DAF2FAFC6
FireEye	Generic.mg.067daf2fafc65d03
Sophos	ATK/Avet-A
Ikarus	Trojan.Win32.Meterpreter
Jiangmin	Trojan.Cometer.ep
Avira	TR/Meterpreter.cnyzq
Antiy-AVL	Trojan/Win32.Cometer
Microsoft	Trojan:Win32/Meterpreter.gen!C
Arcabit	DeepScan:Generic.ShellCode.Marte.H.89A65F37
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	DeepScan:Generic.ShellCode.Marte.H.89A65F37
Google	Detected
McAfee	Packed-SC!067DAF2FAFC6
MAX	malware (ai score=87)
VBA32	Trojan.Cometer
Panda	Trj/GdSda.A
Rising	Trojan.Generic@AI.80 (RDMK:cmRtazp96HtiB3kMCXv+LKccI5d8)
Yandex	Trojan.GenAsa!PGDygsfM0Go
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PACKED.SC!tr
AVG	Win32:Malware-gen
Cybereason	malicious.fafc65
DeepInstinct	MALICIOUS