Malware

What is “Generic.Dacic.94CCEEA9.A.A628911C (B)”?

Malware Removal

The Generic.Dacic.94CCEEA9.A.A628911C (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Dacic.94CCEEA9.A.A628911C (B) virus can do?

  • Sample contains Overlay data
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Generic.Dacic.94CCEEA9.A.A628911C (B)?


File Info:

name: 1C90E21E44F6B16FA2AF.mlw
path: /opt/CAPEv2/storage/binaries/553c3b2abde652e5c867bc5734f8303d3ef2d397142e0674051846bd661fdf68
crc32: 97C321C6
md5: 1c90e21e44f6b16fa2af3a9845e8d896
sha1: 3a4195ae52e7bc2d2c09177b95d298b89d3cf974
sha256: 553c3b2abde652e5c867bc5734f8303d3ef2d397142e0674051846bd661fdf68
sha512: 97a2852c115e551e8a2fd9ab366e6d343b9336a65b4727ee99e5baba647098e922ba6b6ceb4376e5a322a6aa9deba8208fde7a350163c60fa3b67a4be629104b
ssdeep: 3072:A9BV0pozHf2g2JSbSH92bJVnI09il/LO2R1om5IacOPUlfAOFk:A9GoSrJSY21VnI4KAMUlfAOF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T123048F629970BB16E915093517A06BFA401D3C2F4BE9030DBCADDE5F3353DAA34AF942
sha3_384: 4ebf273edde75870af202669c7325580fd831c7e2d5c46fa4da567dea43bec3403dcbea18d3fa43c29cb7f0b89c4007f
ep_bytes: 68c0914200e8f0ffffff000000000000
timestamp: 2019-04-26 10:28:09

Version Info:

Translation: 0x0804 0x04b0
CompanyName: aaaa
ProductName: Kawaii-Unicorn
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Kawaii-Unicorn
OriginalFilename: Kawaii-Unicorn.exe

Generic.Dacic.94CCEEA9.A.A628911C (B) also known as:

BkavW32.AIDetect.malware1
MicroWorld-eScanGeneric.Dacic.94CCEEA9.A.A628911C
ClamAVWin.Malware.Midie-6847892-0
FireEyeGeneric.mg.1c90e21e44f6b16f
CAT-QuickHealTrojan.MuldVMF.S21469993
ALYacGeneric.Dacic.94CCEEA9.A.A628911C
SangforSuspicious.Win32.Save.vb
K7AntiVirusP2PWorm ( 005499db1 )
K7GWP2PWorm ( 005499db1 )
CrowdStrikewin/malicious_confidence_100% (D)
VirITTrojan.Win32.Banker1.BRRU
CyrenW32/VB_Troj.J.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/VBClone.D
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.VB.dosb
BitDefenderGeneric.Dacic.94CCEEA9.A.A628911C
NANO-AntivirusTrojan.Win32.VB.fmvqeg
AvastWin32:VB-AJKU [Trj]
TencentTrojan.Win32.Vb.b
Ad-AwareGeneric.Dacic.94CCEEA9.A.A628911C
EmsisoftGeneric.Dacic.94CCEEA9.A.A628911C (B)
ComodoTrojWare.Win32.VBClone.B@88ji29
DrWebTrojan.MulDrop17.61497
VIPREGeneric.Dacic.94CCEEA9.A.A628911C
McAfee-GW-EditionBehavesLike.Win32.Rontokbro.cc
SophosML/PE-A + Mal/VB-AQT
IkarusTrojan.VB.VBClone
GDataGeneric.Dacic.94CCEEA9.A.A628911C
JiangminTrojan.VB.aqyg
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASBOL.C594
ArcabitGeneric.Dacic.94CCEEA9.A.A628911C
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Trojan/Win32.Agent.R252862
Acronissuspicious
McAfeeGenericRXHC-SS!1C90E21E44F6
MAXmalware (ai score=83)
VBA32SScope.Trojan.VB
MalwarebytesMalware.AI.2186998604
RisingTrojan.VBClone!1.B5C7 (CLASSIC)
SentinelOneStatic AI – Malicious PE
BitDefenderThetaGen:NN.ZevbaF.34606.lm0@aq5PeYgb
AVGWin32:VB-AJKU [Trj]
Cybereasonmalicious.e44f6b

How to remove Generic.Dacic.94CCEEA9.A.A628911C (B)?

Generic.Dacic.94CCEEA9.A.A628911C (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment