Categories: Malware

Generic.Nimda.4B2F39DD malicious file

The Generic.Nimda.4B2F39DD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Nimda.4B2F39DD virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Generic.Nimda.4B2F39DD?


File Info:
name: 54F602E1C2E0E4ABA253.mlwpath: /opt/CAPEv2/storage/binaries/daf6237d0dfa2ed49890d09597c708a92c4b0a054de6951e47f3bd52d9fd6b49crc32: C83B40FAmd5: 54f602e1c2e0e4aba253ed80534fa934sha1: f8f4028f35d681eb39eb9df6b4c18ebe6e07231dsha256: daf6237d0dfa2ed49890d09597c708a92c4b0a054de6951e47f3bd52d9fd6b49sha512: 82d13332d85f619506b3c9fc36e5b41a33e370d6221babfc761b267ec6174329e4a556dfde9343277c924d135d9ff7bcf076fcd99bab18cf13ceed2f4d61e148ssdeep: 768:f/WQ3/TymxfsHYPry0bgYh3LKgMoCDGFh9VisKl4qRx:f+QvT7xUHYPDbgYVLWofVisKldRxtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CF63C4029E011516D8AA0B30E0ADBA1996237FFA1634825B3B39FCDDFE7D3672464B54sha3_384: 6389ad9082cae51f6e66e99528b6eac1f4dfbe6eec7266951b3db75f6fdcd919376a088c2e447d0188e2c315ce15eb29ep_bytes: 56576820204000ff15042040008bf085timestamp: 2017-03-28 15:19:13
Version Info:
CompanyName: AVAST SoftwareFileDescription: Avast remediation exeFileVersion: 17.3.3443.0InternalName: wsc_proxy.exeLegalCopyright: Copyright (c) 2014 AVAST SoftwareOriginalFilename: wsc_proxy.exeProductName: Avast Antivirus ProductVersion: 17.3.3443.0Translation: 0x0409 0x04e4

Generic.Nimda.4B2F39DD also known as:

Lionic	Trojan.Win32.Nimda.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Nimda.4B2F39DD
FireEye	Generic.mg.54f602e1c2e0e4ab
CAT-QuickHeal	W32.Runouce.CR2
McAfee	W32/Chir.gen!remnants
Cylance	Unsafe
Sangfor	Worm.Win32-Script.Save.Nimda
K7AntiVirus	Trojan ( 0008d46e1 )
Alibaba	Virus:Win32/Virut.105f8801
K7GW	Trojan ( 0008d46e1 )
CrowdStrike	win/malicious_confidence_70% (W)
VirIT	Win32.Chir.B
Cyren	W32/Thecid.A!Generic
Symantec	W32.Virut.CF
ESET-NOD32	a variant of Win32/Chir.C
Baidu	Win32.Trojan.Agent.bf
TrendMicro-HouseCall	PE_VIRUX.A-3
ClamAV	Win.Worm.Brontok-88
BitDefender	Generic.Nimda.4B2F39DD
Avast	Win32:Vitro [Inf]
Tencent	Virus.Win32.Virut.ue
Ad-Aware	Generic.Nimda.4B2F39DD
Emsisoft	Generic.Nimda.4B2F39DD (B)
DrWeb	JS.Nimda
VIPRE	Generic.Nimda.4B2F39DD
TrendMicro	PE_VIRUX.A-3
McAfee-GW-Edition	BehavesLike.Win32.Generic.km
SentinelOne	Static AI – Malicious PE
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
APEX	Malicious
GData	Generic.Nimda.4B2F39DD
Jiangmin	Heur:Trojan/VB
Avira	W32/Chir.B
Antiy-AVL	Trojan/Generic.ASCommon.11
Arcabit	Generic.Nimda.4B2F39DD
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
VBA32	Trojan.MSIL.Crypt
ALYac	Generic.Nimda.4B2F39DD
MAX	malware (ai score=86)
Malwarebytes	Chir.Virus.FileInfector.DDS
Rising	Virus.Chir!8.7C (CLOUD)
Yandex	I-Worm.Chir.B
Ikarus	Email-Worm.Win32.Runouce.B
MaxSecure	Virus.W32.Runouce.B
Fortinet	W32/Chir.C!tr
AVG	Win32:Vitro [Inf]
Cybereason	malicious.1c2e0e
Panda	W32/Sality.AO