Categories: Malware

Generic.StealerA.3CA41A53 malicious file

The Generic.StealerA.3CA41A53 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.StealerA.3CA41A53 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Attempts to connect to a dead IP:Port (1 unique times)
Dynamic (imported) function loading detected
Authenticode signature is invalid
Steals private information from local Internet browsers
Exhibits behavior characteristic of Pony malware
Collects information about installed applications
Harvests cookies for information gathering
Harvests credentials from local FTP client softwares
Harvests information related to installed mail clients
Anomalous binary characteristics

How to determine Generic.StealerA.3CA41A53?


File Info:
name: DA0232081AE861CD8C93.mlwpath: /opt/CAPEv2/storage/binaries/5a9501424e047067316c6eb3fb73763a9e20e7f88b747bfe29dcbcc6a8eb6ca0crc32: 5A0976E5md5: da0232081ae861cd8c93989af4be0d28sha1: e285b72667b1d4c9da0cb8f93ddcd4ffb74608bcsha256: 5a9501424e047067316c6eb3fb73763a9e20e7f88b747bfe29dcbcc6a8eb6ca0sha512: 4fc887a3a01947501f29746e3e541efb83664873e7c0a93d15e900453032f6948fe097395680f9faa8883d04c4d6e2064af935069cd9051dcb6adb21ffe9264cssdeep: 1536:hT/iQalqTQHfQmElBhlwnpqwTuHNrE1lUOLc15TvoEARkzZ0Z:Z/OgmElBh6nwwTwbOL5EAaItype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17CA30803F880E0F1C1A22BB177C15762E7F99D797C7A8D4EEF8C49856DE22876B16412sha3_384: f9e3c6edf52ade5b371ed1cc7dac98d332f1b31fed2b7fb964a9f5b6826bc0032862cb2520734889c3143d6ece41f3bfep_bytes: 50586835034100f87201c3ffe8380100timestamp: 2012-09-14 11:03:50
Version Info:
0: [No Data]

Generic.StealerA.3CA41A53 also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Trojan.PonyStealer-9831667-0
FireEye	Generic.mg.da0232081ae861cd
CAT-QuickHeal	PWS.Fareit.E3
ALYac	Generic.StealerA.3CA41A53
Malwarebytes	Spyware.Pony
Zillya	Trojan.Tepfer.Win32.6308
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Generic.StealerA.3CA41A53
K7GW	Password-Stealer ( 0040f4f51 )
K7AntiVirus	Password-Stealer ( 0040f4f51 )
BitDefenderTheta	Gen:NN.ZexaF.34182.gmW@aCTfU6m
VirIT	Trojan.Win32.Stealer.BKK
Cyren	W32/A-f0951580!Eldorado
Symantec	Infostealer!im
ESET-NOD32	a variant of Win32/PSW.Fareit.D
TrendMicro-HouseCall	TSPY_FAREIT.SMAL
Cynet	Malicious (score: 100)
Kaspersky	Trojan-PSW.Win32.Tepfer.gen
NANO-Antivirus	Trojan.Win32.Tepfer.vtxfj
MicroWorld-eScan	Generic.StealerA.3CA41A53
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazrUwjREEvRgYtEUuYvhk8Cr)
Ad-Aware	Generic.StealerA.3CA41A53
Sophos	ML/PE-A + Mal/Behav-116
Comodo	TrojWare.Win32.PWS.Fareit.GS@5t8zib
DrWeb	Trojan.PWS.Stealer.946
VIPRE	Trojan-PWS.Win32.Fareit.h (v)
TrendMicro	TSPY_FAREIT.SMAL
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.cm
Emsisoft	Generic.StealerA.3CA41A53 (B)
APEX	Malicious
Jiangmin	Trojan/Generic.afvvk
Avira	TR/PSW.Fareit.iloen
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.1367D6
Arcabit	Generic.StealerA.3CA41A53
ZoneAlarm	Trojan-PSW.Win32.Tepfer.gen
GData	Generic.StealerA.3CA41A53
SentinelOne	Static AI – Malicious PE
AhnLab-V3	Trojan/Win32.Tepfer.R93111
Acronis	suspicious
McAfee	PWS-Zbot.gen.aiz
VBA32	SScope.Malware-Cryptor.Ponik
Yandex	Trojan.GenAsa!eAKHNffkSI8
Ikarus	Trojan-Spy.Fareit
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Agent.NTM!tr
Cybereason	malicious.81ae86
Panda	Trj/Genetic.gen