Generik.TSABRC (file analysis)

The Generik.TSABRC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.TSABRC virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generik.TSABRC?


File Info:
crc32: 1F2E3B4E
md5: 842c3c8b62e4ed67ec529ab08ee87c4a
name: kb-auto-win-update.exe
sha1: a026cb6932b6d8995e6815c56968e47796db4fd4
sha256: 408b95eaa2997cf448ac803a6ba988b7cbb149baab9a46e7b67ef4c4df4fe711
sha512: c774249bc27e2ffe7901dbab0546bcb39dcfb13a3a36a2e3bae09856978c56a6b61bf9707e6d39d2fb8b9b24fbc57b86622a5926860637c88d866125ea297ed8
ssdeep: 6144:VBI8Ck/UL/Q2p01/4zd2hlWKTktvzJ9fUEC:Vu8Vc02WJ6ghIKTUrJ9fUJ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 HOME 2008
Assembly Version: 1.0.2.0
InternalName: Notepad.NET.exe
FileVersion: 1.0.2.0
CompanyName: HOME
LegalTrademarks: 
Comments: Text File Editor
ProductName: Notepad.NET
ProductVersion: 1.0.2.0
FileDescription: Notepad.NET
OriginalFilename: Notepad.NET.exe

Generik.TSABRC also known as:

McAfee	RDN/Generic.grp
Sangfor	Malware
Cybereason	malicious.932b6d
TrendMicro	TROJ_GEN.R011C0PF620
BitDefenderTheta	Gen:NN.ZemsilF.34126.xq0@ayjQIae
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
GData	Win32.Trojan.Agent.1UV6H9
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
Alibaba	Backdoor:MSIL/Crysan.f7a2a387
Sophos	Mal/Generic-S
F-Secure	Backdoor.BDS/Redcap.stlob
McAfee-GW-Edition	RDN/Generic.grp
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.842c3c8b62e4ed67
SentinelOne	DFI – Malicious PE
Avira	BDS/Redcap.stlob
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Backdoor.MSIL.Crysan.gen
Microsoft	Trojan:Win32/Wacatac.C!ml
ESET-NOD32	a variant of Generik.TSABRC
TrendMicro-HouseCall	TROJ_GEN.R011C0PF620
Ikarus	Trojan.SuspectCRC
eGambit	Unsafe.AI_Score_64%
Fortinet	PossibleThreat
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Backdoor.c00

How to remove Generik.TSABRC?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generik.TSABRC (file analysis)