Trojan

How to remove “MemScan:Trojan.Generic.5044701”?

Malware Removal

The MemScan:Trojan.Generic.5044701 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MemScan:Trojan.Generic.5044701 virus can do?

  • Dynamic (imported) function loading detected
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Korean
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Installs itself for autorun at Windows startup
  • Deletes executed files from disk

How to determine MemScan:Trojan.Generic.5044701?



File Info:

name: C6944D4710CA8E0DDF62.mlw
path: /opt/CAPEv2/storage/binaries/abbba7081c88cfcc58e643254494608ba835af6acd029b0419193dfd73496126
crc32: 17806B46
md5: c6944d4710ca8e0ddf62621eeece55d6
sha1: 09d5b6e83648cd8a975218345905e07d00d95c41
sha256: abbba7081c88cfcc58e643254494608ba835af6acd029b0419193dfd73496126
sha512: 1d2ca8d08d324c9f0e2a67c0a9d961f3c5d3e0e140d54e5eb52dddd28e1d60cf813586cf026108d292c2989aa4d5997b84aecc7245563eb7a3a5423ec63f1ce0
ssdeep: 24576:x0DSaaqt3Yzvt+p364cQhgqF19xCNuTGdklGAM6Tw10IoQIVcsWWWQvL:GDaqVevGKtQOqF19xCNuT0GGAM6s1tYZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T199352353A9C0523FE4E917B445C669E3933A5CF05B1A23D7DA4D97E9AC700C12A383AF
sha3_384: 16941a0314054f1e833e547261e7472d1ba22420eb3c104846044bb851372a3b1648caa3adc7503001734c3ad458a5b8
ep_bytes: e80a000000e97affffffcccccccccc8b
timestamp: 2008-04-13 18:32:45


Version Info:

CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor                                           
FileVersion: 6.00.2900.5512 (xpsp.080413-2105)
InternalName: Wextract                
LegalCopyright: (C)Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE            
ProductName: Microsoft(R) Windows(R) Operating System
ProductVersion: 6.00.2900.5512
Translation: 0x0412 0x04b0

MemScan:Trojan.Generic.5044701 also known as:

MicroWorld-eScanMemScan:Trojan.Generic.5044701
CAT-QuickHealTrojan.Buzus.9827
ALYacMemScan:Trojan.Generic.5044701
CylanceUnsafe
VIPREMemScan:Trojan.Generic.5044701
Sangfor[CAB]
K7AntiVirusTrojan ( 004c01941 )
K7GWTrojan ( 004c01941 )
Cybereasonmalicious.710ca8
CyrenW32/Trojan.TMKA-3154
SymantecW32.Ackantta!Dr
Elasticmalicious (high confidence)
ESET-NOD32Win32/Merond.O
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Buzus-6981596-0
KasperskyVirus.Win32.Cabres.a
BitDefenderMemScan:Trojan.Generic.5044701
NANO-AntivirusTrojan.Win32.Buzus.btthy
AvastWin32:Delf-NUF [Trj]
Ad-AwareMemScan:Trojan.Generic.5044701
EmsisoftMemScan:Trojan.Generic.5044701 (B)
ComodoMalware@#1pmcoyj0gvybg
DrWebBackDoor.Poison.686
TrendMicroWORM_PROLACO.SMX
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.c6944d4710ca8e0d
SophosW32/Cabble-A
IkarusVirus.Win32.DelfInject
GDataMemScan:Trojan.Generic.5044701
JiangminTrojan/Buzus.aphr
AviraDR/Delphi.Gen
Antiy-AVLTrojan/Generic.ASMalwS.AA
ArcabitTrojan.Generic.D4CF9DD
ZoneAlarmVirus.Win32.Cabres.a
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
McAfeeGenericRXAA-AA!5988F5EEA2E0
MAXmalware (ai score=81)
VBA32BScope.Trojan.Inject
MalwarebytesMalware.AI.3876546765
TrendMicro-HouseCallWORM_PROLACO.SMX
RisingTrojan.Injector!1.DF63 (CLASSIC)
YandexTrojan.GenAsa!182ltQ8vvNk
MaxSecureVirus.Win32.Cabres.A
FortinetW32/Injector.fam!tr
BitDefenderThetaAI:Packer.DCFF6F721E
AVGWin32:Delf-NUF [Trj]
PandaGeneric Suspicious
CrowdStrikewin/malicious_confidence_90% (W)

How to remove MemScan:Trojan.Generic.5044701?

MemScan:Trojan.Generic.5044701 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment