Categories: Malware

How to remove “Generic.ServStart.A.B3D1AFDF”?

The Generic.ServStart.A.B3D1AFDF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ServStart.A.B3D1AFDF virus can do?

Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Deletes its original binary from disk
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

z.whorecord.xyz

nuoxi.f3322.net

a.tomx.xyz

How to determine Generic.ServStart.A.B3D1AFDF?


File Info:
crc32: 3A675191md5: e727ab3c688c996ce3f390f7e212f461name: systom.exesha1: 1c8ee408d8f65f13e9110a97dc1708cb67517535sha256: 5ac2874a009b3042a6673e18c5ea417bfc9b6155beb25a86d87aa77e3e7b2d0dsha512: bcc99f704018cca7b6337c78ea526c4a4e067b03483ea817103e360f3b797d62908f8c939b1750f5c58636ad0569f998be7ba1613e1dd268371652a2aaa2f6e4ssdeep: 768:7I0+FNeQT1ok/ILtq2FV5AY6t+ayph/bAUn26wriTJogrIyP85P85jaZV9VYnst:7I0eMCoHFVet+phX7lBF85EAaQqzatype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Microsoft Corporation. All rights reserved.InternalName: FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)CompanyName: Microsoft CorporationPrivateBuild: LegalTrademarks: Comments: ProductName: Microsoft Operating SystemSpecialBuild: ProductVersion: 6.1.7600.16385FileDescription: Windows Enhanced Storage Password Authentication ProgramOriginalFilename: Authn.exeTranslation: 0x0809 0x04b0

Generic.ServStart.A.B3D1AFDF also known as:

Bkav	W32.AIDetectVM.malware2
DrWeb	Trojan.DownLoader25.10495
MicroWorld-eScan	Generic.ServStart.A.B3D1AFDF
FireEye	Generic.mg.e727ab3c688c996c
Qihoo-360	Win32/Trojan.e04
McAfee	GenericRXAA-AA!E727AB3C688C
Cylance	Unsafe
VIPRE	BehavesLike.Win32.Malware.wsc (mx-v)
AegisLab	Trojan.Win32.Generic.4!c
K7AntiVirus	Trojan ( 000170ae1 )
BitDefender	Generic.ServStart.A.B3D1AFDF
K7GW	Trojan ( 000170ae1 )
Cybereason	malicious.c688c9
TrendMicro	DDoS.Win32.NITOL.SMG
BitDefenderTheta	AI:Packer.E5C659451F
Cyren	W32/Trojan.CZR.gen!Eldorado
TotalDefense	Win32/PackedBaidu
TrendMicro-HouseCall	DDoS.Win32.NITOL.SMG
Avast	Win32:Dh-A [Heur]
ClamAV	Win.Malware.Nitol-6802818-0
GData	Generic.ServStart.A.B3D1AFDF
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	DDoS:Win32/Nitol.d09214eb
NANO-Antivirus	Trojan.Win32.Ric.etbkiz
Tencent	Malware.Win32.Gencirc.10b35dba
Ad-Aware	Generic.ServStart.A.B3D1AFDF
Sophos	Mal/Generic-S
Comodo	Malware@#ede8a0wgooz0
F-Secure	Trojan.TR/Downloader.Gen
Zillya	Trojan.Agent.Win32.799880
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fake.pc
Trapmine	malicious.high.ml.score
Emsisoft	Generic.ServStart.A.B3D1AFDF (B)
Ikarus	Trojan.Win32.Agent
F-Prot	W32/Trojan.CZR.gen!Eldorado
Jiangmin	Trojan.Generic.bjpij
Webroot	W32.Trojan.Gen
Avira	TR/Downloader.Gen
Antiy-AVL	Trojan/Win32.AGeneric
Endgame	malicious (moderate confidence)
Arcabit	Generic.ServStart.A.B3D1AFDF
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Occamy.AA
AhnLab-V3	Trojan/Win32.Nitol.R215641
Acronis	suspicious
VBA32	BScope.TrojanDDoS.Macri
ALYac	Trojan.DDoS.Nitol.gen
MAX	malware (ai score=89)
Malwarebytes	Trojan.ServStart
Panda	Trj/Genetic.gen
APEX	Malicious
ESET-NOD32	a variant of Win32/Agent.RTQ
Rising	Trojan.Agent!8.B1E (TFE:5:87fVyGeA1oT)
Yandex	Trojan.Agent!eY9gJ4jf8PM
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Agent.RTQ!tr
AVG	Win32:Dh-A [Heur]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.7164915.susgen