Malware

Should I remove “Generic.Malware.Lco.51C8FEDA”?

Malware Removal

The Generic.Malware.Lco.51C8FEDA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Malware.Lco.51C8FEDA virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • CAPE detected the Nitol malware family

How to determine Generic.Malware.Lco.51C8FEDA?


File Info:

name: 1467333D89E9FE11CE0D.mlw
path: /opt/CAPEv2/storage/binaries/2a34eb6ab3757312635dc6995c61610b68407b039a754a109ca9efac4bdaf9d3
crc32: 293524CE
md5: 1467333d89e9fe11ce0d7a442d24cc8e
sha1: e1c960374179409ac212050ecc1c51b21e33d52d
sha256: 2a34eb6ab3757312635dc6995c61610b68407b039a754a109ca9efac4bdaf9d3
sha512: 42e992f4c9d0df6eae382ccb9c06aa3bb381d189f7e8b2e96b6766eef516edc73197ef994c3719cd61636270e713264d958c6330b009034488608c075e05515d
ssdeep: 3072:syIpG2/iDbY+N8KOZkzjRjwosVf6lHpSXyQ64:RIposYbB3RjVgCHpUy1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E2B312AF454F2033D1A5653AA92F789CC88C5953AE4330F51DEE84D817FE9E0A5C1B3A
sha3_384: f4ce42f1c1ec5c5f0bc24ccaceb3c309686605377c9be2498af20599e9710b2284efb1429bf6effc29a062dde65f32b9
ep_bytes: 60be006044008dbe00b0fbff5783cdff
timestamp: 2022-02-15 04:15:37

Version Info:

0: [No Data]

Generic.Malware.Lco.51C8FEDA also known as:

MicroWorld-eScanDeepScan:Generic.Malware.Lco.51C8FEDA
FireEyeGeneric.mg.1467333d89e9fe11
CAT-QuickHealTrojan.FarfliRI.S27090835
McAfeeGenericRXAA-FA!1467333D89E9
MalwarebytesMalware.AI.3275231171
ZillyaTrojan.Kryptik.Win32.3717602
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005631771 )
K7GWTrojan ( 005631771 )
Cybereasonmalicious.d89e9f
ArcabitDeepScan:Generic.Malware.Lco.51C8FEDA
CyrenW32/Trojan.LBET-0583
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Kryptik.HCAH
APEXMalicious
ClamAVWin.Packed.Zeus-9942823-0
KasperskyHEUR:Backdoor.Win32.Farfli.gen
BitDefenderDeepScan:Generic.Malware.Lco.51C8FEDA
NANO-AntivirusTrojan.Win32.Kryptik.jmvgmk
AvastFileRepMalware [Rat]
TencentBackdoor.Win32.farfli.zf
Ad-AwareDeepScan:Generic.Malware.Lco.51C8FEDA
TACHYONTrojan/W32.Agent.385024.ADI
EmsisoftDeepScan:Generic.Malware.Lco.51C8FEDA (B)
ComodoBackdoor.Win32.Farfli.FK@7jqjxo
DrWebTrojan.Siggen11.63246
VIPREDeepScan:Generic.Malware.Lco.51C8FEDA
TrendMicroTROJ_GEN.R011C0DHF22
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
Trapminemalicious.moderate.ml.score
SophosMal/Generic-R + Troj/Farfli-EA
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Farfli.eqx
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan/Generic.ASMalwS.26E9
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataDeepScan:Generic.Malware.Lco.51C8FEDA
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.OX.C4976986
BitDefenderThetaGen:NN.ZexaF.34592.hmGfaC8dAql
ALYacDeepScan:Generic.Malware.Lco.51C8FEDA
MAXmalware (ai score=82)
VBA32Trojan.Farfli
TrendMicro-HouseCallTROJ_GEN.R011C0DHF22
RisingBackdoor.Farfli!8.B4 (CLOUD)
YandexTrojan.GenAsa!gBhknYBDYco
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic.AP.322A94!tr
AVGFileRepMalware [Rat]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Generic.Malware.Lco.51C8FEDA?

Generic.Malware.Lco.51C8FEDA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment