Win32/Keygen.XG potentially unsafe removal instruction

The Win32/Keygen.XG potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Keygen.XG potentially unsafe virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Network activity detected but not expressed in API logs

How to determine Win32/Keygen.XG potentially unsafe?


File Info:
name: 3EF7418CB89B3146D8AA.mlw
path: /opt/CAPEv2/storage/binaries/d74f200c4b6db775a6d2edfd2b94169877665b30883275cd242ecbeb0559c395
crc32: B7BCD416
md5: 3ef7418cb89b3146d8aaf892ebe4ed41
sha1: ef83a792985e470a9317c402d6051e2159cf4ab4
sha256: d74f200c4b6db775a6d2edfd2b94169877665b30883275cd242ecbeb0559c395
sha512: c69e110f7ff09639b8894483478d3f546b8f3ed17403f5f560719137f4f1a3f8bfea2e9e57585bbdb90acc190c1b75476e6ec0643c28c745dc590a97a691b0bd
ssdeep: 1536:iNXsRJ7Znsvy6V5vyn+jPQ8QZ/LvltZ3X:Om7dsvx5a+SZ/LNtd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E9D37C52F6C3C0B1E80A013A1066DB17AF3669651B61E5C3EBA54F4EDE332D2A737385
sha3_384: 6384ea1bdbc8d28081b6bf2745cbb060b4c57556640680c95ad7ebf6724f826efeb2df467e8275cab2754ae666a94e25
ep_bytes: e898430000e916feffff8b442404a394
timestamp: 2006-10-11 15:19:25

Version Info:
0: [No Data]

Win32/Keygen.XG potentially unsafe also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.3ef7418cb89b3146
McAfee	Artemis!3EF7418CB89B
Cylance	Unsafe
Sangfor	PUP.Win32.Presenoker.mt
BitDefenderTheta	Gen:NN.ZexaF.34294.iqW@amlDVgbi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Keygen.XG potentially unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H0CJJ21
Paloalto	generic.ml
ClamAV	Win.Trojan.Agent-609619
Avast	Win32:Evo-gen [Susp]
Rising	Trojan.Generic@ML.90 (RDML:iP4LAsj7HHSSgzAmJI20bw)
Sophos	Generic PUA OP (PUA)
Comodo	Application.Win32.HackTool.Keygen.UX@7eqw3f
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.iuol
Avira	TR/Patched.Ren.Gen
Microsoft	Trojan:Win32/Wacatac.A!ml
Cynet	Malicious (score: 100)
APEX	Malicious
Tencent	Virus.Win32.Virut.ue
Yandex	Trojan.GenAsa!jzigCAkEm7c
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/KeyGen
Webroot	W32.Trojan.Gen
AVG	Win32:Evo-gen [Susp]

How to remove Win32/Keygen.XG potentially unsafe?

Win32/Keygen.XG potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X