Categories: Malware

About “Generic.Rincux2.E8B6CF9D” infection

The Generic.Rincux2.E8B6CF9D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Rincux2.E8B6CF9D virus can do?

Executable code extraction
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Deletes its original binary from disk
Sniffs keystrokes
Creates a copy of itself
Created a service that was not started
Anomalous binary characteristics

How to determine Generic.Rincux2.E8B6CF9D?


File Info:
crc32: A18F33C2md5: d50a4860ada3f5e89d676e6754a3e502name: server.exesha1: 6fed131e7f7633181ce923743b9c9f5536a21f44sha256: b01e6c91d3b896f110a9f6603acee3fe450be3476bb80db3bfbe374daded4267sha512: 385be1bafdec002b93ca540641a1a31e431bd4322eaa8329954320da3bddb86ca22c9b721f976bfb5992a21ee5aeb8c245519d2fdcf0547b02e0714d622442ecssdeep: 1536:udcLp6Og10PqqZlaS26PIW+kHe17u8zgsUop+GLyV8G:Dt6t09PAh7bUsVcGLUtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x4f4dx6df1x5ea6    36FileVersion: 1920 X 1080CompanyName: PNG x56fex50cfComments: HouSoftProductName: x9ad8x5ea6      1080ProductVersion: x5bbdx5ea6      1920 FileDescription: PNG x56fex7247x6587x4ef6 (.png)OriginalFilename: x7834x635fx56fex7247Translation: 0x0409 0x04e4

Generic.Rincux2.E8B6CF9D also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	DeepScan:Generic.Rincux2.E8B6CF9D
FireEye	Generic.mg.d50a4860ada3f5e8
ALYac	DeepScan:Generic.Rincux2.E8B6CF9D
K7AntiVirus	Trojan ( 00567b521 )
BitDefender	DeepScan:Generic.Rincux2.E8B6CF9D
K7GW	Trojan ( 00567b521 )
Cybereason	malicious.0ada3f
TrendMicro	TROJ_GEN.R002C0DG720
BitDefenderTheta	Gen:NN.ZexaF.34132.gq0@a8PI1Hgb
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Backdoor.Win32.Lotok.chf
Alibaba	Backdoor:Win32/Lotok.f3f1bbde
Tencent	Malware.Win32.Gencirc.10cdd24b
Ad-Aware	DeepScan:Generic.Rincux2.E8B6CF9D
Emsisoft	DeepScan:Generic.Rincux2.E8B6CF9D (B)
F-Secure	Heuristic.HEUR/AGEN.1134990
Zillya	Trojan.Lotok.Win32.39
Ikarus	Trojan.Win32.Genome
GData	DeepScan:Generic.Rincux2.E8B6CF9D
Jiangmin	Backdoor.Lotok.jl
Avira	HEUR/AGEN.1134990
Antiy-AVL	Trojan[Backdoor]/Win32.Lotok
Microsoft	Backdoor:Win32/Zegost.BW
Endgame	malicious (high confidence)
Arcabit	DeepScan:Generic.Rincux2.E8B6CF9D
ZoneAlarm	Backdoor.Win32.Lotok.chf
Cynet	Malicious (score: 90)
AhnLab-V3	Backdoor/Win32.Zegost.R342689
Acronis	suspicious
McAfee	GenericRXLA-RS!D50A4860ADA3
MAX	malware (ai score=89)
ESET-NOD32	a variant of Win32/Kryptik.HDPV
TrendMicro-HouseCall	TROJ_GEN.R002C0DG720
Rising	Trojan.Kryptik!1.C71D (CLOUD)
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Lotok.CHF!tr
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_80% (W)
Qihoo-360	Win32/Backdoor.673