GenPack:Generic.ServStart.A.B4757725 (file analysis)

The GenPack:Generic.ServStart.A.B4757725 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What GenPack:Generic.ServStart.A.B4757725 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.

Related domains:

z.whorecord.xyz

a.tomx.xyz

linyuner99.oicp.net

How to determine GenPack:Generic.ServStart.A.B4757725?


File Info:
crc32: 5C598610
md5: f23e198572a2eb855c1d209084233d16
name: F23E198572A2EB855C1D209084233D16.mlw
sha1: d2bf27bea2478cb2a6a660af563f4678923e59c1
sha256: 27f0edf643ced848fd457cc9ee6f2edb1cc1e9ee98b29cded41454a97f62602a
sha512: baea88a33647713389d545629068bfa3d9f32c21c6c0de597196ad5ceab1cc8315e58a8915381b44f82ee77b92bd810a2d36197a058952a3e2ad98cc39008db2
ssdeep: 3072:ErQhAYjm9gD6d7kfr7q+JTZ87K02vdCfEglyD7t9wVCQvVPo6a0LPzvMpREnH1L:EkhS9gelkfRTZL02vIMDNSVCWoSkpoV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x7248x6743x6240x6709(C) 2014
InternalName: 360x8fdbx7a0bx8f85x52a9
FileVersion: 1, 0, 0, 1
CompanyName: x5faex8f6fx4e2dx56fd
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: 360x8fdbx7a0bx8f85x52a9
SpecialBuild: 
ProductVersion: 1, 0, 0, 1
FileDescription: 360x8fdbx7a0bx8f85x52a9
OriginalFilename: 360x8fdbx7a0bx8f85x52a9
Translation: 0x0804 0x04b0

GenPack:Generic.ServStart.A.B4757725 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0052c8a31 )
Lionic	Trojan.Win32.Vehidis.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	GenPack:Generic.ServStart.A.B4757725
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Vehidis.cc603cf4
K7GW	Trojan ( 0052c8a31 )
Cybereason	malicious.572a2e
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ServStart.IZ
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Ransomware.Aicat-9862601-0
Kaspersky	Trojan.Win32.Vehidis.bjy
BitDefender	GenPack:Generic.ServStart.A.B4757725
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
MicroWorld-eScan	GenPack:Generic.ServStart.A.B4757725
Ad-Aware	GenPack:Generic.ServStart.A.B4757725
Sophos	ML/PE-A + Troj/Zegost-U
Comodo	Backdoor.Win32.Zegost.~BA@4k703s
BitDefenderTheta	AI:Packer.266B56CF1F
VIPRE	Trojan-Dropper.Win32.Resdro.b (v) (not malicious)
TrendMicro	TROJ_GEN.R007C0PGH21
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
FireEye	Generic.mg.f23e198572a2eb85
Emsisoft	GenPack:Generic.ServStart.A.B4757725 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Vehidis.cr
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_95%
Microsoft	Trojan:Win32/Skeeyah.A
GData	GenPack:Generic.ServStart.A.B4757725
Acronis	suspicious
McAfee	BackDoor-EXZ
MAX	malware (ai score=89)
VBA32	BScope.Trojan.StartServ
Malwarebytes	Malware.AI.3090422851
Panda	Generic Suspicious
TrendMicro-HouseCall	TROJ_GEN.R007C0PGH21
Rising	Trojan.Generic@ML.100 (RDML:mfSG06/zMWopSpryIn2zPQ)
Yandex	Trojan.Vehidis!gpHkEM+kmeQ
Ikarus	Virus.Fat.Obfuscated
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Filecoder.FV!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Vehidis.HxMBEpsA

How to remove GenPack:Generic.ServStart.A.B4757725?

GenPack:Generic.ServStart.A.B4757725 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

GenPack:Generic.ServStart.A.B4757725 (file analysis)