Categories: Malware

What is “Generic.Nimda.D8E0A9BF”?

The Generic.Nimda.D8E0A9BF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Nimda.D8E0A9BF virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Nimda.D8E0A9BF?


File Info:
name: 171AC8F946EA8CA62061.mlwpath: /opt/CAPEv2/storage/binaries/3bac38f9c5b272f51a7f85c992c8cfe0900c23b3bf1376d5fac5dc1773a6fdf7crc32: 5A098512md5: 171ac8f946ea8ca620613abbbaf20704sha1: c868fd30dbb5efaf13a11198168146361275346esha256: 3bac38f9c5b272f51a7f85c992c8cfe0900c23b3bf1376d5fac5dc1773a6fdf7sha512: 90f5a69e99a3472338a8a9e4f65aff14de65fe072dcb6c3d05d2956230463526020cc90b7b6d21993276d59548a2ee793eb496d7a4fa30956819126fae7d7717ssdeep: 1536:SbbEBKksdaqqetP64visKldR3rzwV7Rq63JKqIPwBnj3:SbYyqetPgV3/w5RqOmwVjtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E6839E463C53C033E4164EB482D586C1DFBF69033AE3A17FEB5541891EB13A8166A7FAsha3_384: 6867e78e8eb86c957ea88f824ceb1e98907b384eca2a5c13fbc232554e7f854c5f81951f28e37e3c3ddff08ebcc551c0ep_bytes: e8b5170000e917feffff558bec81ec28timestamp: 1997-04-07 03:01:30
Version Info:
Comments: Run this to install Kane & Lynch: Dead Men on your computer.CompanyName: IO InteractiveFileDescription: Install Kane & Lynch: Dead MenFileVersion: 1, 0, 0, 1InternalName: SetupLegalCopyright: Copyright (C) 2007OriginalFilename: Setup.exeProductName: Setup ApplicationProductVersion: 1, 0, 0, 1Translation: 0x0409 0x04b0

Generic.Nimda.D8E0A9BF also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Nimda.4!c
AVG	Win32:Agent-BARL [Trj]
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Nimda.D8E0A9BF
FireEye	Generic.mg.171ac8f946ea8ca6
McAfee	Artemis!171AC8F946EA
Cylance	unsafe
Sangfor	Worm.Win32-Script.Save.Nimda
CrowdStrike	win/malicious_confidence_90% (D)
Arcabit	Generic.Nimda.D8E0A9BF
Baidu	Win32.Trojan.Agent.bf
Symantec	W32.Madangel
tehtris	Generic.Malware
Cynet	Malicious (score: 99)
APEX	Malicious
ClamAV	Win.Worm.Brontok-88
BitDefender	Generic.Nimda.D8E0A9BF
Avast	Win32:Agent-BARL [Trj]
Emsisoft	Generic.Nimda.D8E0A9BF (B)
F-Secure	Malware.W32/Chir.B
DrWeb	JS.Nimda
VIPRE	Generic.Nimda.D8E0A9BF
McAfee-GW-Edition	BehavesLike.Win32.Infected.mh
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	Heur:Trojan/VB
Avira	W32/Chir.B
MAX	malware (ai score=85)
Antiy-AVL	Worm[NET]/Win32.Nimda.gic
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Generic.Nimda.D8E0A9BF
Google	Detected
BitDefenderTheta	Gen:NN.ZexaF.36250.fq0@ai2aUnmi
ALYac	Generic.Nimda.D8E0A9BF
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Yandex	I-Worm.Chir.B
Ikarus	Worm.Win32.Chir
Fortinet	W32/Chir.C!tr
DeepInstinct	MALICIOUS