Win32:BotX-gen [Trj] removal tips

Malware Removal

The Win32:BotX-gen [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32:BotX-gen [Trj] virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Unconventionial language used in binary resources: Danish
  • The binary likely contains encrypted or compressed data.
  • Creates a hidden or system file
  • Anomalous binary characteristics

How to determine Win32:BotX-gen [Trj]?


File Info:

crc32: 927336C4
md5: 8181f66194b6655820919cdd99c8287d
name: vps.exe
sha1: 2a70b43dc2ba24dfcf7ba1434c6783a3c8c94512
sha256: c37fd8bfe533ef16bd7c75c459fb3683d3de6da800c444f47e29255213948894
sha512: 039b37cfa33bca1d34a3cc94de92dcad346fe7e497578a18d99bf5f8ad91b6435b563edbaa9ad799f81721e40c3c5afcf2d3154381e4ecd1b11c5066321028d2
ssdeep: 12288:AWe1jTXZRXbt26shMUz15X+J1oF+US5FdzCYvMcK8b7o:Q1RRLtqZB56+uzxvMcl7
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32:BotX-gen [Trj] also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanTrojan.GenericKD.42868282
FireEyeGeneric.mg.8181f66194b66558
Qihoo-360HEUR/QVM10.1.07F1.Malware.Gen
ALYacTrojan.GenericKD.42868282
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 0053d5971 )
BitDefenderTrojan.GenericKD.42868282
K7GWTrojan ( 0053d5971 )
BitDefenderThetaGen:NN.ZexaF.34100.JuW@a8mdCroG
APEXMalicious
Paloaltogeneric.ml
GDataTrojan.GenericKD.42868282
KasperskyTrojan-Banker.Win32.Danabot.eky
AvastWin32:BotX-gen [Trj]
RisingTrojan.Generic@ML.97 (RDML:Z4hDdLm6PxMycneoeP9IKg)
Ad-AwareTrojan.GenericKD.42868282
SophosMal/RyPack-A
F-SecureTrojan.TR/Crypt.Agent.nuvsg
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.42868282 (B)
AviraTR/Crypt.Agent.nuvsg
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D28E1E3A
ZoneAlarmTrojan-Banker.Win32.Danabot.eky
MicrosoftTrojan:Win32/Wacatac.D!ml
AhnLab-V3Trojan/Win32.MalPe.R329360
Acronissuspicious
McAfeeArtemis!8181F66194B6
MAXmalware (ai score=81)
VBA32BScope.Trojan.AET.281105
MalwarebytesTrojan.MalPack.GS
ESET-NOD32a variant of Win32/Kryptik.HCCS
SentinelOneDFI – Suspicious PE
eGambitUnsafe.AI_Score_74%
FortinetW32/GenKryptik.EGRK!tr
AVGWin32:BotX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Win32:BotX-gen [Trj]?

Win32:BotX-gen [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment