Categories: Malware

Generik.DVWEFES malicious file

The Generik.DVWEFES is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.DVWEFES virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Presents an Authenticode digital signature
Unconventionial language used in binary resources: Chinese (Traditional)
Authenticode signature is invalid

How to determine Generik.DVWEFES?


File Info:
name: CA0281138194BA86F866.mlwpath: /opt/CAPEv2/storage/binaries/b46e101392c60613e13759120dc4b0483b8e34d1c904ca09194765a45265e50acrc32: 72E0B46Emd5: ca0281138194ba86f8665a7b26a86118sha1: 861cd5c0bc9492a4ae1519c68d92ca7534182f90sha256: b46e101392c60613e13759120dc4b0483b8e34d1c904ca09194765a45265e50asha512: 989e6be09e656e6c5502ead8f554bb9a583066d1a5e3c4f235a63638dc46b9288ea8b2d4bf020f174cf3be9f140424eb40d7d8a1f5c35f1f6024d39012e2e76cssdeep: 3072:7kJGwWKhnLv6PgnJScfyDQLaWPbWBBNh/rOAqkxEaJOYjYhk52dx8Yep3OlTqeY0:7mZWKhnLv6PncfnGp+aX7otype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1B6542B2026E99524F7F219B6CAF9C1159E3A79A14B34C2CF12D0851E6EF1BD19E31B33sha3_384: 7c9833194e815f4d0d89ddea7221927e49eec394b30b6f7e72f1d0eaade097b478fe48345fc994fc7e918400f5dec175ep_bytes: e8e2670000e9a5feffff6a0c68e0b443timestamp: 2016-07-06 06:16:58
Version Info:
CompanyName: Realtek SemiconductorFileDescription: Realtek Audio ServiceFileVersion: 1, 0, 0, 74InternalName: RtkAudioServiceLegalCopyright: 2013 (c) Realtek Semiconductor.  All rights reserved.OriginalFilename: RtkAudioService.exeProductName: Realtek Audio ServiceProductVersion: 1, 0, 0, 74Translation: 0x0404 0x04b0

Generik.DVWEFES also known as:

Lionic	Virus.Win32.Chir.n!c
DrWeb	JS.Nimda
MicroWorld-eScan	Win32.Worm.Nimda.O
FireEye	Generic.mg.ca0281138194ba86
CAT-QuickHeal	W32.Runouce.B
ALYac	Win32.Worm.Nimda.O
Malwarebytes	Chir.Virus.FileInfector.DDS
Sangfor	Worm.Win32-Script.Save.Nimda
K7AntiVirus	Trojan ( 0008d46e1 )
Alibaba	Virus:Win32/fragment.b6d92905
K7GW	Trojan ( 0008d46e1 )
Cybereason	malicious.38194b
VirIT	Win32.Chir.B
Cyren	W32/Agent.JX.gen!Eldorado
Symantec	W32.Chir.B@mm
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Generik.DVWEFES
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Worm.Brontok-88
Kaspersky	HEUR:Virus.Win32.Chir.gen
BitDefender	Win32.Worm.Nimda.O
Avast	Win32:Agent-BARL [Trj]
Tencent	Win32.Virus.Chir.Cplw
Ad-Aware	Win32.Worm.Nimda.O
Sophos	Mal/Generic-S
Baidu	Win32.Trojan.Agent.bf
VIPRE	Win32.Worm.Nimda.O
TrendMicro	WORM_CHIR.DI
McAfee-GW-Edition	W32/Chir.gen!remnants
Trapmine	suspicious.low.ml.score
Emsisoft	Win32.Worm.Nimda.O (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Heur:Trojan/VB
Google	Detected
Avira	W32/Chir.B
Antiy-AVL	Trojan/Generic.ASCommon.11
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Virus.Win32.Chir.gen
GData	Win32.Worm.Nimda.O
Cynet	Malicious (score: 99)
McAfee	W32/Chir.gen!remnants
MAX	malware (ai score=85)
Cylance	Unsafe
TrendMicro-HouseCall	WORM_CHIR.DI
Rising	Virus.Chir!8.7C (CLOUD)
Yandex	I-Worm.Chir.B
Ikarus	Email-Worm.Win32.Runouce.B
MaxSecure	Virus.W32.Runouce.B
Fortinet	W32/Chir.C!tr
AVG	Win32:Agent-BARL [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_70% (W)