What is “Generic.HidroClutter.A.1EC61B39”?

The Generic.HidroClutter.A.1EC61B39 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.HidroClutter.A.1EC61B39 virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Generic.HidroClutter.A.1EC61B39?


File Info:
name: 5C2ACC39BD8C1C32AF8C.mlw
path: /opt/CAPEv2/storage/binaries/7c39856215ac8a77996d304358196cd8d10b3d399fb509c88d04ef500f196e18
crc32: 0F4BF7D3
md5: 5c2acc39bd8c1c32af8c61286d032340
sha1: f9b9e8b491b9740c9c09d4272bbe2dc8a68c3acb
sha256: 7c39856215ac8a77996d304358196cd8d10b3d399fb509c88d04ef500f196e18
sha512: 2fea28d7277977e4424cce697d1f699cfd822b43a361227ef06c6cd18f1504eadff1654e8639ea7246580d00e03b6be79a7f1cb8bef8a4d2be6ce02ac7378176
ssdeep: 3072:1LMcu7cIA5SvNsQGuI7/Bvwr+y8HuMXl5/qY:N2veQ29YSy217q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D1C3DF1973F8D772C23612BA1C6902918FB5AC32DC39D59B788A22CD3772B4179A17D3
sha3_384: b9ca8741ebc837d4bc171b6a423dda996eb36263c78ae48cfc406f7550f057438926147ce7be46329ac671c3e2ad7b81
ep_bytes: ff250020400001020304050607080000
timestamp: 2070-12-26 22:12:23

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WormLocker2.0
FileVersion: 1.0.0.0
InternalName: WormLocker2.0.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: WormLocker2.0.exe
ProductName: WormLocker2.0
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Generic.HidroClutter.A.1EC61B39 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.HidroClutter.A.1EC61B39
FireEye	Generic.mg.5c2acc39bd8c1c32
CAT-QuickHeal	Trojan.MsilFC.S23219025
McAfee	GenericRXOE-HJ!5C2ACC39BD8C
Cylance	Unsafe
VIPRE	Generic.HidroClutter.A.1EC61B39
Cybereason	malicious.9bd8c1
Cyren	W32/MSIL_Ransom.G.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Filecoder.AEP
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.MSIL.Encoder.gen
BitDefender	Generic.HidroClutter.A.1EC61B39
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Generic.HidroClutter.A.1EC61B39
DrWeb	Trojan.EncoderNET.31372
TrendMicro	Ransom.MSIL.CRYPTOLOCKER.SM.hp
McAfee-GW-Edition	GenericRXOE-HJ!5C2ACC39BD8C
Emsisoft	Generic.HidroClutter.A.1EC61B39 (B)
SentinelOne	Static AI – Malicious PE
GData	Generic.HidroClutter.A.1EC61B39
Avira	HEUR/AGEN.1236286
MAX	malware (ai score=80)
Arcabit	Generic.HidroClutter.A.1EC61B39
Microsoft	Ransom:MSIL/WormLckr.SR!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.C4267207
Acronis	suspicious
ALYac	Generic.HidroClutter.A.1EC61B39
Malwarebytes	Ransom.WormLocker
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:o+tDKw3lgKXrRwsinfHLfw)
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Filecoder.AHF!tr.ransom
BitDefenderTheta	Gen:NN.ZemsilF.34806.hm0@aedfMem
AVG	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Generic.HidroClutter.A.1EC61B39?

Generic.HidroClutter.A.1EC61B39 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X