Generic.Nimda.D961EB1F removal

The Generic.Nimda.D961EB1F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Nimda.D961EB1F virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

How to determine Generic.Nimda.D961EB1F?


File Info:
crc32: 1D992E0C
md5: c3a5c673ddb1c3ada699e8356f0ae8ba
name: C3A5C673DDB1C3ADA699E8356F0AE8BA.mlw
sha1: 0dcddbeceecee315acdb413a040b0fba52c3ab9b
sha256: 0455d07fea5c9f7520b46592c5d137374a690ef0d140351b44edf3d6f8de02cb
sha512: d3642eb2c16648e3d9e124db08ad6cbc680196e26ca3d1f9e15a465f08d6f31bfad2b6e0f7a7ecbef69d857775767d5c7f6e13b93b703e133c0d5dfa0dcdc130
ssdeep: 24576:2TWHhEbYjZgTzCQgRGVFBgYaVrUsCwnTh/g15n:gWhaHCJlfCwnTh/I5n
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2015 baidu.COM. All rights reserved.
InternalName: kernelUpdate
FileVersion: 1.0.0.9
CompanyName: BAIDU.COM
ProductVersion: 1.0.0.9
OriginalFilename: autoDiagnoseUpdate.exe
Translation: 0x0804 0x04b0

Generic.Nimda.D961EB1F also known as:

K7AntiVirus	Trojan ( 0008d46e1 )
DrWeb	JS.Nimda
ALYac	Generic.Nimda.D961EB1F
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 0008d46e1 )
Cybereason	malicious.3ddb1c
Baidu	Win32.Trojan.Agent.bf
Cyren	W32/Thecid.A!Generic
Symantec	IFrame.Exploit
Avast	Win32:Agent-BARL [Trj]
ClamAV	Win.Worm.Brontok-88
Kaspersky	HEUR:Virus.Win32.Chir.gen
BitDefender	Generic.Nimda.D961EB1F
MicroWorld-eScan	Generic.Nimda.D961EB1F
Tencent	Virus.Win32.ChineseHackerRes.a
Ad-Aware	Generic.Nimda.D961EB1F
Sophos	Mal/Generic-S
Comodo	EmailWorm.Win32.Runonce.~v001@1qup51
VIPRE	Win32.Chir.b!dam (v)
McAfee-GW-Edition	W32/Chir.gen!remnants
FireEye	Generic.Nimda.D961EB1F
Emsisoft	Generic.Nimda.D961EB1F (B)
Jiangmin	Worm/AutoRun.eqe
Avira	W32/Chir.B
Antiy-AVL	Trojan/Generic.ASVirus.1FE
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Virus.Win32.Chir.gen
GData	Generic.Nimda.D961EB1F
McAfee	W32/Chir.gen!remnants
MAX	malware (ai score=86)
Malwarebytes	Chir.Virus.FileInfector.DDS
Panda	W32/Chir.P.worm
Ikarus	Email-Worm.Win32.Runouce
MaxSecure	Virus.W32.Runouce.B
Fortinet	W32/Runouce.B!tr
AVG	Win32:Agent-BARL [Trj]

How to remove Generic.Nimda.D961EB1F?

Generic.Nimda.D961EB1F removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X