Categories: Malware

How to remove “Generic.Malware.SM.7BC9627C”?

The Generic.Malware.SM.7BC9627C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Malware.SM.7BC9627C virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Installs itself for autorun at Windows startup

How to determine Generic.Malware.SM.7BC9627C?


File Info:
name: 76FF0B311E26F1322C63.mlwpath: /opt/CAPEv2/storage/binaries/cbf579a991168b8018fc086aebc9c96387a881a6136bc9a0d0985c73f98c7682crc32: 9BA222B1md5: 76ff0b311e26f1322c63023c30c54549sha1: 143baa09884c13cd59eb048f756954e5a6d2bc6dsha256: cbf579a991168b8018fc086aebc9c96387a881a6136bc9a0d0985c73f98c7682sha512: f5384dcab9350bb5dd98d0610d8c27802ee1b95f56653e05e975ff51765bf3e31712b0769d7e8f2f6696dd6580aacf9cb4b362ca472242ca021a961325d98cb7ssdeep: 192:yJwQ6DP9g+bhseSPGYWsA7/+yvMxrss+6PRk2/gm7WpuOc2rxWWSQ/7Sm0e:pQ6O+bhOHW3/FkrssFg/fc2sO0etype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15E329E17AE5880F3D1F600B8AAA35B134D39BC10D1978A046FBD852F7CF27554926632sha3_384: 8b9c3b41a777347b89e9a76e4dd8c17211dbb173b1bcafce494f05c46a2f7bd64bb6f889a358e9b814350bbe5773be40ep_bytes: 60be009040008dbe0080ffff5783cdfftimestamp: 2002-06-22 19:18:56
Version Info:
Translation: 0x0409 0x04b0ProductName: DocTorFileVersion: 1.00ProductVersion: 1.00InternalName: DocTorOriginalFilename: DocTor.exe

Generic.Malware.SM.7BC9627C also known as:

DrWeb	Win32.HLLM.Generic.62
MicroWorld-eScan	Generic.Malware.SM.7BC9627C
FireEye	Generic.Malware.SM.7BC9627C
ALYac	Generic.Malware.SM.7BC9627C
Cylance	Unsafe
Zillya	Worm.Dotor.Win32.2
Sangfor	Worm.Win32.Dotor.ky
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Worm:Win32/Dotor.a2b60c90
K7GW	Trojan ( 00497a181 )
K7AntiVirus	Trojan ( 00497a181 )
BitDefenderTheta	AI:Packer.07C0EA021F
VirIT	Worm.Win32.DOTOR
Cyren	W32/Dotor.USCC-2205
Symantec	W32.Dotor.A@mm
ESET-NOD32	Win32/DoTor.A
TrendMicro-HouseCall	WORM_DOTOR.A
Paloalto	generic.ml
ClamAV	Win.Worm.Dotor-1
Kaspersky	Email-Worm.Win32.Dotor
BitDefender	Generic.Malware.SM.7BC9627C
NANO-Antivirus	Trojan.Win32.Dotor.emkx
Avast	Win32:Dotor [Wrm]
Tencent	Win32.Worm-email.Dotor.Akpr
Emsisoft	Generic.Malware.SM.7BC9627C (B)
Comodo	Worm.Win32.DoTor.A@48yt
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	WORM_DOTOR.A
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.lc
Sophos	W32/Dotor-A
SentinelOne	Static AI – Malicious PE
Jiangmin	I-Worm/Dotor
Avira	WORM/Doctor.4
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.2499F63
Microsoft	Worm:Win32/Dotor.A@mm
ViRobot	I-Worm.Win32.Dotor.11776
ZoneAlarm	Email-Worm.Win32.Dotor
GData	Generic.Malware.SM.7BC9627C
Cynet	Malicious (score: 99)
AhnLab-V3	Win32/Dotor.worm.11776
McAfee	W32/DoTor@MM.a
VBA32	BScope.Worm.VB
APEX	Malicious
Rising	Worm.Mail.Dotor.a (CLOUD)
Yandex	I-Worm.Pettor.A
Ikarus	Worm.Win32.Dotor
eGambit	Unsafe.AI_Score_95%
Fortinet	W32/Dotor.A!worm
AVG	Win32:Dotor [Wrm]
Cybereason	malicious.11e26f
Panda	W32/Dotor.A