Generic.Malware.2.E7B2DACA removal

The Generic.Malware.2.E7B2DACA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Malware.2.E7B2DACA virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Network activity detected but not expressed in API logs

How to determine Generic.Malware.2.E7B2DACA?


File Info:
name: BF798B1FF7E669FBAE3A.mlw
path: /opt/CAPEv2/storage/binaries/ebcd12235db6cd21f051a6d976beee20f1429a97f8e3ab70aa9ea4833116893c
crc32: EAFD7CEA
md5: bf798b1ff7e669fbae3a25964e953706
sha1: 8e6e801c18d9e7b1ffe12ec3edc858c12400d884
sha256: ebcd12235db6cd21f051a6d976beee20f1429a97f8e3ab70aa9ea4833116893c
sha512: 1ad2b662308195cb19b19bf69a26435d6b1be10b16613366ef02e010c585c2df45f0827564e54bfdf9a3b2a0a65a7eaabb01e102401d5ebe00204040e638dd93
ssdeep: 192:YdmvGVUJVJzJfMgC3ahDi+hbTb6vAJBdO6XvsK4sI7/fO:gmvGV0VJzJfMfyDiWbTb6YJBdO6XvsKv
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10432A4017BE90729FBFAEE789CF5D6048B34F652E933CA2F2D10511E5866684C851F32
sha3_384: 0e77d429ed07831731316bd0d4377c94671cc8b0fa55e4132fb9cb839f1884e90843d1ff1f92b6205677218b2e7d5732
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-09-25 17:01:53

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: OPWOOFER
FileVersion: 1.3.3.7
InternalName: OPWOOFER.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: OPWOOFER.exe
ProductName: OPWOOFER
ProductVersion: 1.3.3.7
Assembly Version: 1.3.3.7

Generic.Malware.2.E7B2DACA also known as:

Lionic	Trojan.Win32.Daca.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Malware.2.E7B2DACA
FireEye	Generic.Malware.2.E7B2DACA
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Generic.Malware.2.E7B2DACA
K7AntiVirus	Trojan-Downloader ( 005685711 )
Alibaba	Trojan:MSIL/Generic.dbff2dec
K7GW	Trojan-Downloader ( 005685711 )
Cybereason	malicious.ff7e66
BitDefenderTheta	Gen:NN.ZemsilF.34294.am1@aaclDEk
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.GIW
TrendMicro-HouseCall	TROJ_GEN.R002C0PKK21
BitDefender	Generic.Malware.2.E7B2DACA
Ad-Aware	Generic.Malware.2.E7B2DACA
Emsisoft	Generic.Malware.2.E7B2DACA (B)
McAfee-GW-Edition	Downloader-FBYS!BF798B1FF7E6
Sophos	Mal/Generic-S
GData	Generic.Malware.2.E7B2DACA
Avira	TR/Dldr.Agent.lxbcg
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Downloader-FBYS!BF798B1FF7E6
Malwarebytes	Trojan.Downloader
Tencent	Msil.Trojan-downloader.Agent.Pitt
Yandex	Trojan.DL.Agent!UdkqqIhl96k
Ikarus	Trojan-Downloader.MSIL.Agent
Fortinet	MSIL/Agent.GMJ!tr.dldr
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Generic.Malware.2.E7B2DACA?

Generic.Malware.2.E7B2DACA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X