Categories: Malware

Should I remove “Generic.Dacic.DED21A61.A.3568BABC (B)”?

The Generic.Dacic.DED21A61.A.3568BABC (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.DED21A61.A.3568BABC (B) virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generic.Dacic.DED21A61.A.3568BABC (B)?


File Info:
name: DBE591904412861133AD.mlwpath: /opt/CAPEv2/storage/binaries/7f028262467fb5353c77e4cce84ade3f5eb0e3606449fa0253f0506f05c207afcrc32: 5C1658D1md5: dbe591904412861133ad8399e065d9d8sha1: b5d112fac5926af534c39b389b9e8360cfc60278sha256: 7f028262467fb5353c77e4cce84ade3f5eb0e3606449fa0253f0506f05c207afsha512: da11c7bf4980ecf17f0430271e6b9d531f1a436350ca3651a2884111272533a7b90b985488d4c5502d5edada3e2a7cd14e4a944eb697d31b7d75fd11e38ed0eessdeep: 768:5vQ5qDLHRdw2iPSMEk/6KMvu571xuEMs96cyX1869/EEEEMMooooL999Qzwww2x0:5vQoLHjw2iWPKMvw71sMLyXuqooooix0type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BC234C579B808462D6A7023854E573BB6D77BC398A0DD646FF80FA4F1C75A02FB29903sha3_384: c80f16673e54392be89c453eb9cc7307ff039391c4710a12f5bba1ed54018833bd668979f55003a7968144fa21846ff8ep_bytes: 558bec6aff6870614000684039400064timestamp: 2017-05-29 16:42:28
Version Info:
Comments: CompanyName: Yagu MusicFileDescription: Clien RunProcess LocalFileVersion: 10.0.14393.0 (rs1_release.160715-1616)InternalName: hello.exeLegalCopyright: All rights reserved.LegalTrademarks: OriginalFilename: Yagu MusicPrivateBuild: ProductName: Yagu Music® Operating SystemProductVersion: 17.000.14393.08SpecialBuild: Translation: 0x0409 0x04b0

Generic.Dacic.DED21A61.A.3568BABC (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.m2Bz
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Dacic.DED21A61.A.3568BABC
ClamAV	Win.Trojan.Nitol-6335025-0
FireEye	Generic.Dacic.DED21A61.A.3568BABC
CAT-QuickHeal	Trojan.Mauvaise.SL1
McAfee	GenericRXBM-KE!DBE591904412
Cylance	unsafe
VIPRE	Generic.Dacic.DED21A61.A.3568BABC
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004b803e1 )
Alibaba	Trojan:Win32/Nitol.361
K7GW	Trojan ( 004b803e1 )
Cybereason	malicious.ac5926
VirIT	Trojan.Win32.Dnldr24.CYLH
Cyren	W32/Agent.QSZH-5909
Symantec	SMG.Heur!gen
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Generic.Dacic.DED21A61.A.3568BABC
SUPERAntiSpyware	Trojan.Agent/Gen-ServStart
Avast	Win32:Nitol-B [Trj]
Tencent	Trojan-DDoS.Win32.Nitol.ka
Emsisoft	Generic.Dacic.DED21A61.A.3568BABC (B)
F-Secure	Worm.WORM/ServStart.vxbdh
DrWeb	Trojan.DownLoader24.51669
Zillya	Trojan.ServStart.Win32.16461
TrendMicro	DDOS_NITOL.SMC
McAfee-GW-Edition	BehavesLike.Win32.Generic.pm
Sophos	Troj/Nitol-BE
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.ServStart.F
Jiangmin	TrojanDDoS.Nitol.cm
Avira	WORM/ServStart.vxbdh
Antiy-AVL	Trojan/Win32.AGeneric
Xcitium	TrojWare.Win32.Nitol.AHQ@5iwshg
Arcabit	Generic.Dacic.DED21A61.A.3568BABC
ViRobot	Dropper.Agent.54110
Microsoft	Trojan:Win32/Vindor!pz
Google	Detected
AhnLab-V3	Trojan/Win32.Nitol.R201779
ALYac	Generic.Dacic.DED21A61.A.3568BABC
MAX	malware (ai score=88)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	DDOS_NITOL.SMC
Rising	Backdoor.Overie!1.C6A2 (CLASSIC)
Ikarus	Worm.Win32.ServStart
MaxSecure	Trojan.Win32.Nitol.B
Fortinet	MalwThreat!E1E6IV
AVG	Win32:Nitol-B [Trj]
DeepInstinct	MALICIOUS