Malware

Generic.Malware.Lco.500CC679 removal tips

Malware Removal

The Generic.Malware.Lco.500CC679 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Malware.Lco.500CC679 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • CAPE detected the Nitol malware family
  • Creates a copy of itself
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Generic.Malware.Lco.500CC679?


File Info:

name: 82182C7F430666ECD806.mlw
path: /opt/CAPEv2/storage/binaries/f9a0484222a37b48f410a2a1b6cfc204d0c6a3f722ca69aa0773c2c4f67bea35
crc32: 2D9A5036
md5: 82182c7f430666ecd80649a3c9d4b06a
sha1: b3448fceabc6238ccfa04678c6a68148cedaf924
sha256: f9a0484222a37b48f410a2a1b6cfc204d0c6a3f722ca69aa0773c2c4f67bea35
sha512: 78fa4f78fc02dda5161e5ae550492b9e34791812336f3b3a699374ceba6a1c032e30f73c061ee04c5082856c86de98c52f8944ca7dab491f85da9e570a61193e
ssdeep: 3072:AyIpG2/iDbYyEXcFHUZUMgJUYF+JddZCqNC:lIposRcF0Z9gJh+bd9N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192B312A925663808E6F278B85D2F2CCD2D8D015895B3F45C2C5EC60027FF5BD72A92B7
sha3_384: fde83214f1854fab2d65f291c4b03a2c7fa59b28f467bb204b3028e79a72636401ad583570e5745590fb0a2de74339ac
ep_bytes: 60be006044008dbe00b0fbff5783cdff
timestamp: 2022-02-15 04:15:37

Version Info:

0: [No Data]

Generic.Malware.Lco.500CC679 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Farfli.m!c
Elasticmalicious (moderate confidence)
DrWebTrojan.Siggen11.63246
MicroWorld-eScanDeepScan:Generic.Malware.Lco.500CC679
FireEyeGeneric.mg.82182c7f430666ec
CAT-QuickHealTrojan.FarfliRI.S27090835
SkyhighBehavesLike.Win32.Generic.cc
McAfeeGenericRXAA-FA!82182C7F4306
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Kryptik.Win32.3717602
SangforSuspicious.Win32.Save.a
AlibabaTrojan:Win32/Farfli.4f483598
K7GWTrojan ( 00562edc1 )
K7AntiVirusTrojan ( 00562edc1 )
BitDefenderThetaGen:NN.ZexaF.36804.hmGfai7wjBb
VirITTrojan.Win32.Genus.USK
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HCAH
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0DLH23
AvastWin32:Evo-gen [Trj]
ClamAVWin.Packed.Zeus-9942823-0
KasperskyHEUR:Backdoor.Win32.Farfli.gen
BitDefenderDeepScan:Generic.Malware.Lco.500CC679
NANO-AntivirusTrojan.Win32.Kryptik.jmvgmk
TencentBackdoor.Win32.farfli.zf
EmsisoftDeepScan:Generic.Malware.Lco.500CC679 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
VIPREDeepScan:Generic.Malware.Lco.500CC679
TrendMicroTROJ_GEN.R002C0DLH23
Trapminemalicious.moderate.ml.score
SophosTroj/Farfli-EA
Paloaltogeneric.ml
MAXmalware (ai score=100)
GDataDeepScan:Generic.Malware.Lco.500CC679
JiangminBackdoor.Farfli.eqx
WebrootW32.Malware.Gen
GoogleDetected
AviraTR/Crypt.XPACK.Gen
VaristW32/Trojan.LBET-0583
Antiy-AVLTrojan/Win32.Wacatac
KingsoftWin32.Hack.Farfli.gen
XcitiumBackdoor.Win32.Farfli.FK@7jqjxo
ArcabitDeepScan:Generic.Malware.Lco.500CC679
ViRobotTrojan.Win.Z.Farfli.116736.P
ZoneAlarmHEUR:Backdoor.Win32.Farfli.gen
MicrosoftTrojan:Win32/Farfli!pz
CynetMalicious (score: 100)
AhnLab-V3Backdoor/Win.Gh0stRAT.C4976986
VBA32Trojan.Farfli
ALYacDeepScan:Generic.Malware.Lco.500CC679
Cylanceunsafe
PandaTrj/CI.A
RisingTrojan.Kryptik!1.E27A (CLOUD)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic.AP.322A94!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
alibabacloudBackdoor:Win/Farfli.gen

How to remove Generic.Malware.Lco.500CC679?

Generic.Malware.Lco.500CC679 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment