Categories: Malware

Generic.Malware.SPPk!.8A61D0E8 removal instruction

The Generic.Malware.SPPk!.8A61D0E8 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Malware.SPPk!.8A61D0E8 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Enumerates running processes
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Installs itself for autorun at Windows startup
Creates a copy of itself

How to determine Generic.Malware.SPPk!.8A61D0E8?


File Info:
name: 460F48B7D7BDE2517C1A.mlwpath: /opt/CAPEv2/storage/binaries/22849ec7055723021053d033aab3e22ee63c4174468aac1e4f70886b0a0f2cf9crc32: 7EC0F4D1md5: 460f48b7d7bde2517c1a9a9042682f28sha1: f6ced460439e443aa957c2765328f3b99dcdd252sha256: 22849ec7055723021053d033aab3e22ee63c4174468aac1e4f70886b0a0f2cf9sha512: 4d00718c471e84fd5814a8b0aefa0a7fb2480c75eb2a0925e5582c252aa884a28ca5dec7d5ed25150684602c638a5a24063e1cf5f050d2fdd8a5b1fe0d429ad4ssdeep: 768:2OmnZUlSVXAz2DpAC9RD/HYM9pGG7KQRg5kL:2OmZUlEAiDBHjYCGGuT5type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14DD2F1339C9522E2CDBDA5BBE8240893B3B98AF040D94E005D2D03B67E7A1A3DC2D448sha3_384: 6d2ad48ace75701607f5c5fe33089f27136bd4c62a34b3b37d99b1b126aec3b2ee283fd62653c75e054f43ac4d19de81ep_bytes: 60be000041008dbe0010ffff5783cdfftimestamp: 2002-01-26 21:48:00
Version Info:
0: [No Data]

Generic.Malware.SPPk!.8A61D0E8 also known as:

Lionic	Worm.Win32.Stopin.t!c
MicroWorld-eScan	Generic.Malware.SPPk!.8A61D0E8
CMC	Generic.Win32.460f48b7d7!MD
ALYac	Generic.Malware.SPPk!.8A61D0E8
Cylance	Unsafe
Zillya	Worm.Stopin.Win32.4
Sangfor	Worm.Win32.Petick.W
K7AntiVirus	Trojan ( 000041771 )
Alibaba	Worm:Win32/Stopin.6931ad36
K7GW	Trojan ( 000041771 )
Cybereason	malicious.7d7bde
Cyren	W32/Worm.JLDO-0357
Symantec	W95.Pet_Tick.gen
ESET-NOD32	Win32/Stopin.B
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Stopin-1
Kaspersky	Email-Worm.Win32.Stopin.a
BitDefender	Generic.Malware.SPPk!.8A61D0E8
NANO-Antivirus	Trojan.Win32.Stopin.eobv
ViRobot	I-Worm.Win32.Stopin
Avast	Win32:Stopin [Wrm]
Tencent	Win32.Worm-email.Stopin.Pacd
Sophos	ML/PE-A + W32/Stopin-A
Comodo	Worm.Win32.Stopin.B@sf1
DrWeb	Win32.HLLM.Stopin.60928
VIPRE	BehavesLike.Win32.Malware.ssc (mx-v)
TrendMicro	TROJ_FRS.0NA103B722
McAfee-GW-Edition	BehavesLike.Win32.HLLP.mc
FireEye	Generic.Malware.SPPk!.8A61D0E8
Emsisoft	Generic.Malware.SPPk!.8A61D0E8 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	I-Worm/Stopin.a
Webroot	Worm:Win32/Petick.W@mm
Avira	WORM/Stopin.A
Antiy-AVL	Trojan/Generic.ASMalwS.82C391
Kingsoft	Win32.Troj.Generic_a.c.(kcloud)
Microsoft	Worm:Win32/Petick.W@mm
ZoneAlarm	Email-Worm.Win32.Stopin.a
GData	Generic.Malware.SPPk!.8A61D0E8
Cynet	Malicious (score: 100)
AhnLab-V3	Win32/Stopin.worm.29184
McAfee	Artemis!460F48B7D7BD
MAX	malware (ai score=100)
VBA32	Worm.Stopin
TrendMicro-HouseCall	TROJ_FRS.0NA103B722
Rising	Worm.Singlung.a (CLOUD)
Yandex	Trojan.GenAsa!pVzStI4rqhk
Ikarus	Worm.Win32.Stopin
MaxSecure	Trojan.Malware.1706073.susgen
Fortinet	W32/Stopin.B
BitDefenderTheta	Gen:NN.ZexaF.34182.bmGfaWZYxre
AVG	Win32:Stopin [Wrm]
Panda	W32/Stopin.A
CrowdStrike	win/malicious_confidence_100% (W)