Malware

Generic.Dacic.304514EE.A.5CE2695B removal tips

Malware Removal

The Generic.Dacic.304514EE.A.5CE2695B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.304514EE.A.5CE2695B virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • A file was accessed within the Public folder.
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Generic.Dacic.304514EE.A.5CE2695B?


File Info:

name: 7EF09BCC30A25F222BA8.mlw
path: /opt/CAPEv2/storage/binaries/b96c7b5a5025b567c6b188d500e0cab6344a4b62c385af110c93301f08d17f2f
crc32: 63B53478
md5: 7ef09bcc30a25f222ba88c8028f18f37
sha1: 5c0e084029e1cd7201f9ae138550d30846b5b4c9
sha256: b96c7b5a5025b567c6b188d500e0cab6344a4b62c385af110c93301f08d17f2f
sha512: c75532f2d4737787047d097b368f5f130dd734e923879c3b85ca27683371e3519cb371b520d61dabfc5d1679df4744ce4b31103dc4ed698b655e657d6973f2da
ssdeep: 12288:1MwO5XKqVSh6XFRbf0ez0npM4dl0v5Jdm5IpXt1Ui:1Mn5Sh6XFRbf0ezEM4dmv5BJtOi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F3D4DF83724CED63CD3A3B3F1929B143A953992EFB25A05D1864874B5E62EF7D84B301
sha3_384: 22d8de83dc695025c83e08a39e5f5a353368a49199613475d35c06c8b2fc1fd0547d86a3ca96ad7503e3abe03cf721d8
ep_bytes: 21b318c371eaac44743b95d5b678fd6f
timestamp: 1971-05-16 00:00:00

Version Info:

CompanyName: Wayne J. Radburn
FileDescription: PE/COFF File Viewer
FileVersion: 0.9.9.0
InternalName: PEview
LegalCopyright: Copyright© 1997-2011 Wayne J. Radburn
OriginalFilename: PEview.exe
ProductName: PEview
ProductVersion: 0.9.9.0
Translation: 0x0409 0x04e4

Generic.Dacic.304514EE.A.5CE2695B also known as:

BkavW32.AIDetectMalware
AVGWin32:TrojanX-gen [Trj]
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.304514EE.A.5CE2695B
FireEyeGeneric.mg.7ef09bcc30a25f22
SkyhighBehavesLike.Win32.RAHack.hc
McAfeeTrojan-FVOQ!7EF09BCC30A2
MalwarebytesGeneric.Malware.AI.DDS
VIPREGeneric.Dacic.304514EE.A.5CE2695B
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0001b3411 )
K7GWTrojan ( 0001b3411 )
BitDefenderThetaGen:NN.ZexaF.36804.L83@aSUsTC
VirITTrojan.Win32.Copak.B
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Kryptik.HHBK
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Razy-9786051-0
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderGeneric.Dacic.304514EE.A.5CE2695B
NANO-AntivirusTrojan.Win32.Kryptik.foobtk
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Kryptik.kcf
EmsisoftGeneric.Dacic.304514EE.A.5CE2695B (B)
F-SecureTrojan.TR/Patched.Ren.Gen
ZillyaTrojan.KryptikGen.Win32.6
Trapminesuspicious.low.ml.score
SophosMal/Inject-GJ
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
VaristW32/Dacic.E.gen!Eldorado
AviraTR/Patched.Ren.Gen
MAXmalware (ai score=82)
Antiy-AVLGrayWare/Win32.Kryptik.gifq
Kingsoftmalware.kb.a.983
MicrosoftTrojan:Win32/Barys.GMA!MTB
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitGeneric.Dacic.304514EE.A.5CE2695B
ZoneAlarmVHO:Trojan.Win32.Copak.gen
GDataWin32.Trojan.PSE.109W4IM
GoogleDetected
Acronissuspicious
VBA32Trojan.Khalesi
ALYacGeneric.Dacic.304514EE.A.5CE2695B
TACHYONTrojan/W32.Selfmod
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.Agent!RRuFJhSd6qY
IkarusTrojan.Patched
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
DeepInstinctMALICIOUS

How to remove Generic.Dacic.304514EE.A.5CE2695B?

Generic.Dacic.304514EE.A.5CE2695B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment