Categories: Malware

Generic.ServStart.A.4E8616D3 (B) information

The Generic.ServStart.A.4E8616D3 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ServStart.A.4E8616D3 (B) virus can do?

Attempts to connect to a dead IP:Port (3 unique times)
A process created a hidden window
Drops a binary and executes it
Uses Windows utilities for basic functionality
Deletes its original binary from disk
A process attempted to delay the analysis task by a long amount of time.
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

ipconfig.52yuxiao.cn

www.ffwlll.win

www.ffwlll.cc

a.tomx.xyz

How to determine Generic.ServStart.A.4E8616D3 (B)?


File Info:
crc32: E8D866BEmd5: 44c410b92c6a9accb83710d8746b4062name: Dapp.exesha1: aeffa6a16ce302ef68617e605a652a62102b7231sha256: e12c7d14e694a96b91a553f5dfef15d4520e83183747b97e0ca7ffcf7215b24asha512: 4f5e04e29e1255e3d0c534e75e13fb37c168206665d47fa93ced06a1daad9e07c29586ebd2127141689f71568e0411008d426defcb7e2f87b49fb09409482ad6ssdeep: 768:cXvryXXQkZuzQE98Fs+UmlMVVPG42EmAjE/yQd07d21a1Xxu:cXvryXgkA5eEFjtQd07k1sXtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Generic.ServStart.A.4E8616D3 (B) also known as:

DrWeb	Trojan.PWS.Gamania.44384
MicroWorld-eScan	Generic.ServStart.A.4E8616D3
FireEye	Generic.mg.44c410b92c6a9acc
CAT-QuickHeal	Ddos.Nitol.18525
Qihoo-360	Win32/Worm.Nitol.A
McAfee	BackDoor-FBOD!44C410B92C6A
Malwarebytes	Backdoor.Bot
Sangfor	Malware
K7AntiVirus	Trojan ( 0051b1671 )
BitDefender	Generic.ServStart.A.4E8616D3
K7GW	Trojan ( 0051b1671 )
Cybereason	malicious.92c6a9
Invincea	heuristic
BitDefenderTheta	AI:Packer.BA2556631E
F-Prot	W32/Nitol.R.gen!Eldorado
Symantec	Trojan!im
APEX	Malicious
Avast	Win32:Nitol-B [Trj]
ClamAV	Win.Worm.Agent-5819819-0
GData	Win32.Worm.ServStart.B
Kaspersky	Trojan-DDoS.Win32.Macri.atk
Alibaba	DDoS:Win32/Macri.c776ea39
NANO-Antivirus	Trojan.Win32.Gamania.emsoeh
ViRobot	Backdoor.Win32.ServStart.Gen.A
AegisLab	Trojan.Win32.Macri.9!c
Rising	Trojan.DDOS!1.AF40 (CLOUD)
Ad-Aware	Generic.ServStart.A.4E8616D3
Sophos	Troj/Nitol-AR
Comodo	TrojWare.Win32.ServStart.bre@6az8zh
F-Secure	Trojan.TR/Staser.apzjs
Baidu	Win32.Trojan.ServStart.l
VIPRE	Trojan.Win32.Nitol.b (v)
TrendMicro	TROJ_NITOL.SMN1
McAfee-GW-Edition	BehavesLike.Win32.Derdero.nh
Trapmine	malicious.high.ml.score
CMC	Trojan.Win32.Farfli.1!O
Emsisoft	Generic.ServStart.A.4E8616D3 (B)
SentinelOne	DFI – Malicious PE
Cyren	W32/Nitol.R.gen!Eldorado
Jiangmin	TrojanDDoS.Macri.fo
Webroot	W32.Nitol.B
Avira	TR/Staser.apzjs
Antiy-AVL	Trojan[DDoS]/Win32.Macri
Endgame	malicious (high confidence)
Arcabit	Generic.ServStart.A.4E8616D3
ZoneAlarm	Trojan-DDoS.Win32.Macri.atk
Microsoft	DDoS:Win32/Nitol.A
AhnLab-V3	Backdoor/Win32.Nitol.C1031684
Acronis	suspicious
VBA32	BScope.TrojanDDoS.Macri
ALYac	Generic.ServStart.A.4E8616D3
MAX	malware (ai score=100)
Cylance	Unsafe
Panda	Trj/Genetic.gen
Zoner	Trojan.Win32.52716
ESET-NOD32	a variant of Win32/ServStart.D
TrendMicro-HouseCall	TROJ_NITOL.SMN1
Tencent	Trojan.Win32.Lapka.bw
Ikarus	Trojan.Win32.ServStart
eGambit	Trojan.Generic
Fortinet	W32/SDBot.BX!tr
AVG	Win32:Nitol-B [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.9555478.susgen