Malware

How to remove “Generic.Malware.Lbg.A8CED935”?

Malware Removal

The Generic.Malware.Lbg.A8CED935 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Malware.Lbg.A8CED935 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
fackyou.myq-see.com

How to determine Generic.Malware.Lbg.A8CED935?


File Info:

crc32: 4CA31D40
md5: bac5ffdd183db11d63fc21860d1337b8
name: upload_file
sha1: 301806396d82a7ffad348031f7d721a2f9ddec3d
sha256: 1b8b57fdccb30974af01938df1c16ade299d684fdf12278d7e1c4c036605a0c1
sha512: c73fbe478b1658096e231d950b543f41c2cf3efe12b4885297ec75cde992f86dd7d28215a1852053865c451f12feab9e2f5db2a1bf36a9c4e66fee822d391956
ssdeep: 384:nZy98P9mvYyJy6vnbjfiKSMewzGeLXl9D9O5UE5QzwBlpJNakkjh/TzF7pWndtS:ZK8PYghGb7t/itvQO+8tK+L
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Generic.Malware.Lbg.A8CED935 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Malware.Lbg.A8CED935
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
McAfeeBackDoor-FDPF!BAC5FFDD183D
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderGeneric.Malware.Lbg.A8CED935
K7GWTrojan ( 700000121 )
K7AntiVirusTrojan ( 700000121 )
TrendMicroBKDR_BLADABI.SMC
CyrenW32/MSIL_Bladabindi.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BackDoor-AFW [Trj]
ClamAVWin.Trojan.Generic-6417450-0
KasperskyHEUR:Trojan.Win32.Generic
RisingBackdoor.Njrat!1.C5D1 (CLASSIC)
Ad-AwareGeneric.Malware.Lbg.A8CED935
EmsisoftGeneric.Malware.Lbg.A8CED935 (B)
ComodoTrojWare.MSIL.Bladabindi.CC@7ebfqa
F-SecureTrojan.TR/Dropper.Gen7
DrWebBackDoor.BladabindiNET.7
ZillyaTrojan.Bladabindi.Win32.811
InvinceaML/PE-A + Troj/Bladabi-DR
McAfee-GW-EditionBehavesLike.Win32.BackdoorNJRat.pm
MaxSecureTrojan.Malware.300983.susgen
FireEyeGeneric.mg.bac5ffdd183db11d
SophosTroj/Bladabi-DR
IkarusTrojan.MSIL.Bladabindi
JiangminTrojan.Generic.arrkp
AviraTR/Dropper.Gen7
MicrosoftBackdoor:MSIL/Bladabindi.BT!bit
ArcabitGeneric.Malware.Lbg.A8CED935
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataMSIL.Trojan-Spy.Bladabindi.BR
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/NjRAT05.Exp
Acronissuspicious
ALYacGeneric.Malware.Lbg.A8CED935
MAXmalware (ai score=88)
MalwarebytesBackdoor.Bladabindi
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Bladabindi.BB
TrendMicro-HouseCallBKDR_BLADABI.SMC
TencentMalware.Win32.Gencirc.11af9545
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetMSIL/Bladabindi.AS!tr
BitDefenderThetaGen:NN.ZemsilF.34254.cmW@a4pNKR
AVGWin32:BackDoor-AFW [Trj]
Qihoo-360HEUR/QVM03.0.45E5.Malware.Gen

How to remove Generic.Malware.Lbg.A8CED935?

Generic.Malware.Lbg.A8CED935 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment