Malware

Mal/Generic-S + Troj/Upatre-XZ removal tips

Malware Removal

The Mal/Generic-S + Troj/Upatre-XZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-S + Troj/Upatre-XZ virus can do?

  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Mal/Generic-S + Troj/Upatre-XZ?


File Info:

crc32: EB7DE1FF
md5: 6c052237838df0b47438cb0c173fef07
name: 6C052237838DF0B47438CB0C173FEF07.mlw
sha1: 9576ec9654335ac46967b36dd4cbba25bcd6879f
sha256: 0978a130daa310b0408eddd682336978c1f77e789b6ffea559d2e48cf3632bfd
sha512: c34525f7f24fab6749e32271311ae3dbe3f0e1daae650dfba31087ae0cc1d37edcda8d3d11b9e1f4209e5d7114e53163ae9f8f737b782289d2c5e46cd19d4856
ssdeep: 96:Vb+u4l46E3cX4aVfTmBBoJPGPGahiKEDIKCx1qhk:sHO6OI9TZJ+PrnEEIk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Mal/Generic-S + Troj/Upatre-XZ also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan-Downloader ( 0050fef41 )
Elasticmalicious (high confidence)
ClamAVWin.Malware.Upatre-6722905-0
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.Ppatre.Gen.1
MalwarebytesMalware.AI.3705760751
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan-Downloader ( 00456a071 )
Cybereasonmalicious.7838df
BitDefenderThetaGen:NN.ZexaE.34236.amX@aGKDNwf
SymantecDownloader.Upatre!gm
APEXMalicious
AvastWin32:Downloader-WID [Trj]
CynetMalicious (score: 100)
NANO-AntivirusTrojan.Win32.DownLoad3.cqsjfu
MicroWorld-eScanTrojan.Ppatre.Gen.1
TencentMalware.Win32.Gencirc.10b0ccb6
Ad-AwareTrojan.Ppatre.Gen.1
SophosMal/Generic-S + Troj/Upatre-XZ
ComodoTrojWare.Win32.TrojanDownloader.Upatre.ACC@56yhj8
DrWebTrojan.DownLoader26.64201
McAfee-GW-EditionBehavesLike.Win32.Upatre.xz
EmsisoftTrojan.Ppatre.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Genome.acpr
AviraTR/ATRAPS.Gen
Antiy-AVLTrojan/Generic.ASMalwS.715EEF
ZoneAlarmTrojan-Downloader.Win32.Small.gen
AhnLab-V3Trojan/Win32.Zbot.R83549
Acronissuspicious
VBA32BScope.Trojan.Downloader
MAXmalware (ai score=81)
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
RisingDownloader.Waski!1.A489 (CLASSIC)
YandexTrojan.GenAsa!LXiB97J6ZtU
IkarusTrojan-Downloader.Win32.Upatre
FortinetW32/Tiny.NIV!tr
AVGWin32:Downloader-WID [Trj]

How to remove Mal/Generic-S + Troj/Upatre-XZ?

Mal/Generic-S + Troj/Upatre-XZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment