Categories: Malware

Should I remove “Generik.EHDUTAR”?

The Generik.EHDUTAR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.EHDUTAR virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities for basic functionality

How to determine Generik.EHDUTAR?


File Info:
name: 09FB0A997E126BD24C7C.mlwpath: /opt/CAPEv2/storage/binaries/1009113daa96a84e919c103796788db02b48b38aba43e3c1319d80b7b2e47567crc32: DCB59858md5: 09fb0a997e126bd24c7c65246d72df8esha1: 90cd8373df910b7a72145cac9ffb823570a180fesha256: 1009113daa96a84e919c103796788db02b48b38aba43e3c1319d80b7b2e47567sha512: 71010b9cf4720995ae96fc4e6cb0463a3a91a88c60f4f2db0dcf732ac27b5f1c5877bb9c476e99f140063769c8f1c460ab5439960afb99ddc6ded0ff767d6339ssdeep: 1536:Q77ftfkS5g9YOms+gZcQipICdXkNDqLLZX9lItVGL++eIOlnToIfgwIByWyt08:QXFfHgTWmCRkGbKGLeNTBfgfyWyi8type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T124F30400A2F80BF7D5F906B13391611B462F5BB4F71856C68E682B425523780DFBAEE7sha3_384: 0b41eb086f073e2b9b70753f8378133a2beaecb0967350d7a7dea113d2ba2fff0928734f8a2571e0f2a849d8253457b2ep_bytes: 68ac00000068000000006868804100e8timestamp: 2018-02-01 20:18:05
Version Info:
0: [No Data]

Generik.EHDUTAR also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.GenericPMF.S4848801
ALYac	Trojan.GenericKD.33708837
Cylance	Unsafe
Sangfor	Trojan.Win32.Occamy.C10
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Trojan.IGKK-2907
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.EHDUTAR
Paloalto	generic.ml
BitDefender	Trojan.GenericKD.33708837
MicroWorld-eScan	Trojan.GenericKD.33708837
Avast	FileRepMalware
Rising	Ransom.CruelSister!1.C4EE (C64:YzY0OuPM7GHXlDV2)
Ad-Aware	Trojan.GenericKD.33708837
Sophos	Generic ML PUA (PUA)
Comodo	Malware@#14mzzefa1sftj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.cm
FireEye	Generic.mg.09fb0a997e126bd2
Emsisoft	Trojan.GenericKD.33708837 (B)
Ikarus	Trojan.SuspectCRC
GData	Trojan.GenericKD.33708837
Arcabit	Trojan.Generic.D2025B25
Microsoft	Trojan:Win32/Occamy.C10
TACHYON	Backdoor/W32.Hallaj.158208
AhnLab-V3	Malware/Win32.Generic.C4091630
McAfee	Artemis!09FB0A997E12
MAX	malware (ai score=85)
Yandex	Trojan.Agent!uqimjDxYKfA
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.8328450.susgen
BitDefenderTheta	Gen:NN.ZexaF.34182.juW@aScPmrd
AVG	FileRepMalware
Cybereason	malicious.97e126
Panda	Trj/CI.A