Malware

Win32/Keygen.EP potentially unsafe (file analysis)

Malware Removal

The Win32/Keygen.EP potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Keygen.EP potentially unsafe virus can do?

  • Network activity detected but not expressed in API logs

How to determine Win32/Keygen.EP potentially unsafe?


File Info:

crc32: 8AE874D3
md5: b6ceb60c24487fdec1151916ec8102f6
name: B6CEB60C24487FDEC1151916EC8102F6.mlw
sha1: 7c7066f5716166f0c18ec8bbc8f3ec8cebe2828f
sha256: a7453c74935be3c41a642d365685e2d49f9dbc058e71793641b20b4c356cbadf
sha512: 8b4a83b2a3b47766160bba4e3848c47b5718d77c759b0624fe96b735f4cfa2b7944790aace764aed9fcb5e646474ba30eac6a6a407225a4521e292e42f1cb631
ssdeep: 3072:TQ5RIZ6ZqKP6fQnlR2hq9H8NLE5K0+W1u4/i9YfccwuBub0fbDVVkAGT+:TSy6ZqK3lRB9q8z+Wp69o/wDb0fbZVk
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: keygen.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 1.0.0.0
FileDescription: keygen
OriginalFilename: keygen.exe

Win32/Keygen.EP potentially unsafe also known as:

K7AntiVirusUnwanted-Program ( 0055846c1 )
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.Generic
ALYacTrojan.GenericKD.32482921
CylanceUnsafe
ZillyaTrojan.Scrami.Win32.421
SangforMalware
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:MSIL/AntiWD.8b19e8f3
K7GWUnwanted-Program ( 0055846c1 )
TrendMicroTROJ_GEN.R03BC0DHO20
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Keygen.EP potentially unsafe
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.MSIL.Scrami.gen
BitDefenderTrojan.GenericKD.32482921
MicroWorld-eScanTrojan.GenericKD.32482921
TencentMsil.Trojan.Scrami.Phgo
Ad-AwareTrojan.GenericKD.32482921
SophosMal/Generic-S
ComodoMalware@#zc456ruubhd
F-SecureTrojan.TR/Dropper.MSIL.Gen
BitDefenderThetaGen:NN.ZemsilF.34216.lq0@a0nVZ2o
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-S
FireEyeGeneric.mg.b6ceb60c24487fde
EmsisoftTrojan.GenericKD.32482921 (B)
SentinelOneDFI – Malicious PE
WebrootW32.Hack.Tool
AviraTR/Dropper.MSIL.Gen
MicrosoftTrojan:MSIL/AntiWD.YA!rfn
ArcabitTrojan.Generic.D1EFA669
AegisLabTrojan.MSIL.Scrami.4!c
ZoneAlarmHEUR:Trojan.MSIL.Scrami.gen
GDataMSIL.Application.Keygen.B
AhnLab-V3Unwanted/Win32.KeyGen.R278685
McAfeeRDN/Generic.grp
MAXmalware (ai score=86)
VBA32TScope.Trojan.MSIL
MalwarebytesCrackTool.Agent.Keygen
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R03BC0DHO20
RisingTrojan.Generic@ML.100 (RDML:9xtotFVkbiG6lgFugYW+/w)
IkarusTrojan-Spy.MSIL
MaxSecureTrojan.Malware.74260297.susgen
FortinetMSIL/Scrami.EP!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Generic/Trojan.38f

How to remove Win32/Keygen.EP potentially unsafe?

Win32/Keygen.EP potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment