Categories: Malware

About “Generic.ProcGMar.FD4C31A1” infection

The Generic.ProcGMar.FD4C31A1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ProcGMar.FD4C31A1 virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses suspicious command line tools or Windows utilities

How to determine Generic.ProcGMar.FD4C31A1?


File Info:
name: 494B25BFA48591A1F54F.mlwpath: /opt/CAPEv2/storage/binaries/c7b33996fc9859fc5a23a3af1f287990de6f27cd32f6355ccd406fc614b461f9crc32: 21344F0Bmd5: 494b25bfa48591a1f54fbdc73e2a1cebsha1: 67c4bd63a33ef6fb8e1e0a4abca58bf09aed5866sha256: c7b33996fc9859fc5a23a3af1f287990de6f27cd32f6355ccd406fc614b461f9sha512: ac597031adc72cf8f57a96edc3b197dff546a864944eadf3cb48b93dd05b562307fda5fab8f034b3a87e3d5bb8fba1a39af92467a8022026ad34ea0c62da7848ssdeep: 24576:ylnjI9LmIUu6TVaML+TKWmA7xvRVCTAb8/+LqlkvzbZp1dT7pbW4MAQHlh03wBcL:ylY613jTo82LqyvFW48ewBcHIgdtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10275E123B3918437D07316789D1F86B5A829BF202F28698A3FE91D4C5F786913D1A3D7sha3_384: f78de7415cf0b145bce7efbd91ff6a4b765e1a75e8576cbe9f312d238479ca244d762e3452ea85215ccf0bc87259c151ep_bytes: 558becb9060000006a006a004975f9b8timestamp: 2010-09-29 06:54:24
Version Info:
CompanyName: FileDescription: FileVersion: 1.0.0.0InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: ProductName: setupProductVersion: 1.0.0.0Comments: Translation: 0x0804 0x03a8

Generic.ProcGMar.FD4C31A1 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Click1.62656
MicroWorld-eScan	Generic.ProcGMar.FD4C31A1
ClamAV	Win.Trojan.Procgmar-30
FireEye	Generic.mg.494b25bfa48591a1
Skyhigh	Generic BackDoor.adq
McAfee	Generic BackDoor.adq
Malwarebytes	Binder.Trojan.Dropper.DDS
VIPRE	Generic.ProcGMar.FD4C31A1
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 0040f0b61 )
Alibaba	TrojanDropper:Win32/Clustinex.93b7ba9b
K7GW	Trojan ( 0040f0b61 )
CrowdStrike	win/malicious_confidence_90% (D)
Arcabit	Generic.ProcGMar.FD4C31A1
BitDefenderTheta	AI:Packer.34D9A29119
VirIT	Trojan.Win32.Small.LZL
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDropper.Binder.NCB
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.ProcGMar.FD4C31A1
NANO-Antivirus	Trojan.Win32.Click1.bjpsps
Avast	Win32:Delf-NZB [Trj]
Tencent	Malware.Win32.Gencirc.10b50137
Emsisoft	Generic.ProcGMar.FD4C31A1 (B)
F-Secure	Dropper.DR/Delphi.Gen
Zillya	Dropper.Delf.Win32.10819
TrendMicro	TROJ_AGENT_014772.TOMB
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Webroot	W32.Dropper.Gen
Avira	DR/Delphi.Gen
MAX	malware (ai score=100)
Kingsoft	malware.kb.a.996
Xcitium	TrojWare.Win32.TrojanDropper.Binder.NCBA@4wbzwf
Microsoft	Trojan:Win32/Vindor!pz
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Generic.ProcGMar.FD4C31A1
AhnLab-V3	Trojan/Win32.Genome.R39147
VBA32	Trojan.Click
ALYac	Generic.ProcGMar.FD4C31A1
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_AGENT_014772.TOMB
Rising	Dropper.Binder!8.DA (TFE:5:6SyOjx7kEJT)
Yandex	Trojan.GenAsa!iTfgoccynFM
Ikarus	Trojan-Dropper.Small
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Delf.NVF!tr
AVG	Win32:Delf-NZB [Trj]
DeepInstinct	MALICIOUS