Αυτό το άρθρο αποκαλύπτει το νέο και δημοφιλές trojan, Win64:Malware-Gen, προβάλλονται από τα συστήματα προστασίας από ιούς Avast και Avg για ύποπτα αλλά μη ταξινομημένα αρχεία. Σε αντίθεση με άλλους trojans ή ιούς, Win64:Το Malware Gen έχει ορισμένες ομοιότητες αλλά επίσης ξεχωρίζει με μοναδικούς τρόπους. Βουτήξτε για περισσότερες λεπτομέρειες.
Avast Keeps Catching Virus: Win64:Κακόβουλο λογισμικό-γεν
I have this problem, where Avast keeps catching this virus called Win64:Malware over and over again for about 20 days now, and I’m not sure what I should do about it. I added the logs from Malwarebytes and the Farbar Recovery Scan Tool. The infected file is wmcodecs.dll and the location is C:\Windows\System32. I think the Avast background scanner is catching it. Maybe you could help me with this problem?Forum.avast.com
Τι είναι το Win64 Malware Gen?
Το Avast Antivirus έχει σχεδιάσει και χρησιμοποιήσει το Win64:Malware-gen as a heuristic detection method for identifying trojan horses generically. This malware, Win64 Malware gen exe, could manifest as ransomware, hijacking and encrypting files on the infected computer and demanding payment for their release.
Typically, the Win64:Malware-gen ransomware prompts victims to transfer money, aiming to mitigate the risks the trojan poses to the affected device.
The impacts on targeted computers generally include:
- Opening, editing, modifying, renaming, encrypting, moving, distributing, deleting, or destroying files.
- Conducting network activity undetected, as Win64:Malware-gen conceals its network activity despite Microsoft’s API in Windows OS designed to reveal such activity within the last 30 days.
- Blocking routine access to the infected workstation, a common tactic of viruses known as lockers, until the user pays a ransom.
How Does Win64:Malware-gen Infect a Computer?
Win64 Malware-gen infiltrates machines primarily through phishing emails or by users encountering harmful software online. Additional pathways include downloads from dubious sources, torrent websites, strange links, fake updates, and other insecure avenues.
How Does Win64 Malware Gen Work?
Upon infection, Win64:Malware-gen encrypts data or disrupts programs’ functionality. It then generates a ransom note demanding payment for data decryption or application unblocking, typically revealed upon reboot after hijacking.
The spread of Win64 Malware-Gen is global, adapting its ransom demands and notifications to local or regional nuances.
Για παράδειγμα, it may feign legal warnings about unlicensed software in some regions or masquerade as law enforcement elsewhere, demanding ransom for alleged illegal content found on the computer.
How to Detect a Win64 Malware-gen Infection?
Identifying a malware infection involves noting sudden computer slowdowns, unfamiliar processes, odd browser activities, antivirus alerts about undetectable threats, application issues, screen flickers, or unexpected shutdowns.
What Are the Negative Effects of Win64:Κακόβουλο λογισμικό-γεν?
Infected computers may experience:
- Additional malware installations.
- Fake update or program installation pop-ups.
- Engagement in click fraud.
- Inclusion in spam distribution or botnets.
- Remote hacker access for data theft, including keystrokes, website visits, and sensitive information via registry edits.
- Internet ad bombardments.
- Conversion of webpage text into hyperlinks.
- Sensitive data theft leads to fraudulent transactions, identity theft, and financial losses.
Win64:Malware-gen poses significant threats, not only by disrupting personal device functionality but also by endangering users’ financial and personal security.
Win64:Malware-gen Variants
| Antivirus | Ανίχνευση |
|---|---|
| Alibaba Cloud Security Center | TrojanDropper:Win64/LaZagne.8fcc6442 |
| Avast | Win64:Κακόβουλο λογισμικό-γεν |
| AVG | Win64:Κακόβουλο λογισμικό-γεν |
| Avira | HEUR/AGEN.1046641 |
| Bitdefender | Trojan.PasswordStealer.GenericKDS.33544129 |
| Web | Trojan.Siggen9.20767 |
| Emsisoft | Trojan.GenericKD.33545160 (B) |
| FireEye | Generic.mg.d08c3a2f1f530dcb |
| F-Secure | Heuristic.HEUR/AGEN.1046641 |
| GridinSoft | Trojan.Ransom.Gen |
| K7GW | Riskware ( 0040eff71 ) |
| Kaspersky | not-a-virus:HEUR:PSWTool.Python.LaZagne.gen |
| McAfee | Artemis!D08C3A2F1F53 |
| McAfee GW Edition | BehavesLike.Win32.Backdoor.vc |
| Microsoft | γενναίο και φιλεργό άτομο:Win32/Occamy.C |
| Qihoo 360 | HEUR/QVM10.1.E9CF.Malware.Gen |
| Sophos | Generic PUA KE (PUA) |
| Symantec | Trojan.Gen.MBT |
| Trend Micro Apex One | Malicious |
| TrendMicro HouseCall | TROJ_GEN.R002H07CE20 |
Removing Win64:Malware-Gen Virus
Δεδομένης της πολυπλοκότητάς του, detecting and removing Malware-Gen demands the utmost care. This virus known for hindering security software execution, απαιτεί να παρακάμψετε αυτούς τους περιορισμούς για επιτυχή αφαίρεση και ανάκτηση συστήματος.
Loaris Trojan Remover stands out as the premier choice for eradicating the Win64 Malware-gen threat and restoring your system. It boasts an advanced scanning engine that detects malware in all forms and allows for targeted scans with its Custom Scan feature.
Για να περιηγηθείτε στα μπλοκ εκτέλεσης του ransomware, εκκινήστε τον υπολογιστή σας Ασφαλής λειτουργία με δικτύωση. Αυτό μπορεί να γίνει μέσω του πίνακα αντιμετώπισης προβλημάτων επανεκκινώντας τον υπολογιστή σας κρατώντας πατημένο το πλήκτρο Shift, πλοήγηση στις Ρυθμίσεις εκκίνησης, και επιλέγοντας Windows 10 Ασφαλής λειτουργία με δικτύωση.
Σε ασφαλή λειτουργία, εκκινήστε το πρόγραμμα εγκατάστασης Loaris, ακολουθήστε τις οδηγίες εγκατάστασης, και ενεργοποιήστε τη δωρεάν δοκιμή για πλήρη λειτουργικότητα.
Πραγματοποιήστε πλήρη σάρωση, ελέγξτε τη λίστα των απειλών που εντοπίστηκαν, και προχωρήστε με τις προτεινόμενες ενέργειες αφαίρεσης.
