Worm

What is “Worm.Generic.406157”?

Malware Removal

The Worm.Generic.406157 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.Generic.406157 virus can do?

  • Unconventionial language used in binary resources: Hungarian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Worm.Generic.406157?


File Info:

crc32: BA7E247D
md5: bdf18de7ab52819a7d08285196f7c15d
name: rebellion.exe
sha1: 1609a036952e5e37b3f974190c3d5e61269e20dc
sha256: 397d090fee8f57115721f7963c9b1b309f5c9c5817d35b22ee6b0469d4776f6a
sha512: 51df7230a3fdf2f8b50ead99ed6cb9dd1c174858335f7e0d720d4f1017f0cacb7b436893b69545406032c85f3dff96a728cacd1e5cdae39c82284ce63db8ec26
ssdeep: 3072:4vfWzhpSFrHa/XplSu//7fvmuPcKRLqLP14p7yg:8fWzPSB6/5lPn9Q1M7yg
type: MS-DOS executable, MZ for MS-DOS

Version Info:

0: [No Data]

Worm.Generic.406157 also known as:

BkavHW32.Packed.9E92
MicroWorld-eScanWorm.Generic.406157
nProtectWorm.Generic.406157
CAT-QuickHeal(Suspicious) – DNAScan
McAfeeArtemis!BDF18DE7AB52
VIPREPacked.Win32.Krunchy (v)
F-ProtW32/Bifrost.Q.gen!Eldorado
SymantecTrojan Horse
NormanPacked_spybot_gen6.A
AvastWin32:Malware-gen
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderWorm.Generic.406157
AgnitumPacked/FRBR
RisingPE:Malware.XPACK-HIE/Heur!1.9C48
Ad-AwareWorm.Generic.406157
SophosMal/Generic-S
ComodoHeur.Packed.Unknown
F-SecureWorm.Generic.406157
EmsisoftWorm.Generic.406157 (B)
CyrenW32/Bifrost.Q.gen!Eldorado
MicrosoftTrojan:Win32/Orsam!rts
GDataWorm.Generic.406157
AhnLab-V3Win-Trojan/Xema.variant
ALYacWorm.Generic.406157
AVwarePacked.Win32.Krunchy (v)
PandaTrj/CI.A
Qihoo-360Win32/Trojan.Multi.daf

How to remove Worm.Generic.406157?

Worm.Generic.406157 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment