Categories: Malware

Generic.Dacic.467A5BC0.A.6D213FBA removal guide

The Generic.Dacic.467A5BC0.A.6D213FBA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.467A5BC0.A.6D213FBA virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.467A5BC0.A.6D213FBA?


File Info:
name: 7CFA1B4084337288E483.mlwpath: /opt/CAPEv2/storage/binaries/e3b475037166ed671aaaba0dc2030bd94f82dc9736bd7b5b1b8d8973f1c5b8d7crc32: E58D4B5Amd5: 7cfa1b4084337288e483f8de34017095sha1: d4a55ea8da747de19c6f458a7770d8962568cc59sha256: e3b475037166ed671aaaba0dc2030bd94f82dc9736bd7b5b1b8d8973f1c5b8d7sha512: 1578c40b803f581ec550a7554c189809f6961a6c146d6a32c62c18cf0aa59436adeb37f4cba08626fe84b08e98079d524bd6a4d9b9dc1fbabed7581a5ac81c69ssdeep: 6144:CflfAfJxBlIJjiJcbI03GBc3ucY5DCSjXh7n:CflfAfJsGjSGecvXh7type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T198847C04BAA4F0F6DC95047800DBBF36967E78281726CBC3E754DE5D99213C3A9346ABsha3_384: 226e2c9142eff95961510ac6a035429e5b77517dbd64def9b2305ea76593772cf8bdcfba00203c2050e211f7501081fdep_bytes: e8692f0000e979feffff8b8bff8bdd81timestamp: 2012-07-12 02:56:49
Version Info:
FileDescription: ....................请点击允许，拒绝将无法使用!!!!!!!!!!!!!!!!!!!!!!!!!!!FileVersion: 1, 0, 0, 1InternalName: helpLegalCopyright: Copyright (C) 2012OriginalFilename: noProductName: 辅助 应用程序ProductVersion: 1, 0, 0, 1Translation: 0x0804 0x04b0

Generic.Dacic.467A5BC0.A.6D213FBA also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Dacic.467A5BC0.A.6D213FBA
FireEye	Generic.mg.7cfa1b4084337288
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Generic.Dacic.467A5BC0.A.6D213FBA
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005a81c81 )
K7GW	Trojan ( 005a81c81 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaCO.36348.wy0@a004LIhj
Cyren	W32/Pleh.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Agent.PGA
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Backdoor.Win32.Zegost.gen
BitDefender	Generic.Dacic.467A5BC0.A.6D213FBA
Avast	Win32:Agent-AUSD [Rtk]
Tencent	Trojan.Win32.Nthook.a
Emsisoft	Generic.Dacic.467A5BC0.A.6D213FBA (B)
Baidu	Win32.Rootkit.Agent.w
F-Secure	Trojan.TR/Rogue.7909438
DrWeb	Trojan.Click2.32800
VIPRE	Generic.Dacic.467A5BC0.A.6D213FBA
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
Trapmine	malicious.moderate.ml.score
Sophos	ML/PE-A
Ikarus	Trojan.SuspectCRC
Jiangmin	Trojan/Invader.gje
Avira	TR/Rogue.7909438
Antiy-AVL	Trojan[Dropper]/Win32.Daws.aumx
Xcitium	TrojWare.Win32.Clicker.naf@4qkqfk
Arcabit	Generic.Dacic.467A5BC0.A.6D213FBA
ZoneAlarm	VHO:Backdoor.Win32.Zegost.gen
GData	Win32.Trojan.PSE1.YSVY3N
Google	Detected
AhnLab-V3	Dropper/Win.YK.C5284538
Acronis	suspicious
McAfee	GenericRXAC-YK!7CFA1B408433
MAX	malware (ai score=83)
VBA32	Rootkit.Agent
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.Agent!1.C16F (CLASSIC)
Yandex	Trojan.GenAsa!fCPsWhzUnE4
SentinelOne	Static AI – Malicious PE
MaxSecure	Dropper.Daws.aumx
Fortinet	W32/Wacatac.B!tr
AVG	Win32:Agent-AUSD [Rtk]
Cybereason	malicious.084337
DeepInstinct	MALICIOUS