Genie.500 information

The Genie.500 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Genie.500 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Presents an Authenticode digital signature
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Binary file triggered YARA rule
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Genie.500?

File Info:
name: 58B7C5B8596E5AF829D6.mlw
path: /opt/CAPEv2/storage/binaries/da3a95d70153f65481b2ddaf4555ca680183db970a042181af023ad6b11544d0
crc32: EA902A2F
md5: 58b7c5b8596e5af829d660cfd5fe00ab
sha1: 5371d478de0aea4647a16e3c067ecf32737ceec6
sha256: da3a95d70153f65481b2ddaf4555ca680183db970a042181af023ad6b11544d0
sha512: d77fe76e1a9ac65a971da09d28fbfb4214fa01b2fd7543cae72b2ceed6e13fb2df1714e510e6babb806a7818453024b5d5f7524e8d65a48ceeb4a18d3ffe5fb9
ssdeep: 49152:38Darc0LNfVUxcrD+rxsOU8BiIs7ZpRujPrEUzTO+XZVJnwO4/xr42G:SLzTO+pVxwO4Jr4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13A759E23725BE12ED05D1A395673C670563BBF62901B491B2FE0794C8B77A630E3EE06
sha3_384: ccf6bf2322d554426e79b94fc808f9962759be6ba67f2ed3e8294ea50d0135e959b655a0670c9f75238d59e3f7ab2e5d
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Safer-Networking Ltd.                                       
FileDescription: Spybot - Search & Destroy                                   
FileVersion: 2.9.85.5            
LegalCopyright: © 2000-2021 Safer-Networking Ltd.. All rights reserved.                                             
OriginalFileName:                                                   
ProductName: Spybot - Search & Destroy                                   
ProductVersion: 2.9.85.5                                          
Translation: 0x0000 0x04b0

Genie.500 also known as:

How to remove Genie.500?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.