Should I remove “Generik.NTDCBOW”?

The Generik.NTDCBOW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.NTDCBOW virus can do?

Executable code extraction
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call

How to determine Generik.NTDCBOW?


File Info:
crc32: BC97D977
md5: 954ba1f54b2f6b6694e5e79693d58a21
name: 954BA1F54B2F6B6694E5E79693D58A21.mlw
sha1: f2360cb2960eb8a7039f2a0ebb9a386e60e2000f
sha256: a5af8dad7175c4a1e4935def2027bd846660ea7136382e04beaf43c99438518d
sha512: bdcf31ea6836319708299a7656d515aa0ebcb71e67098a545ae64f78ce20703b72b4da14ad58cb0492da48a1b18813d41f20e0ecd1731930b32df746fed8e334
ssdeep: 6144:koMgXsS8vVr0uBuz7KGW3yv8/fk2SvpLBxGxDDhKg9T0/Q1HN29GBPJs780YWmPW:kopx2ou0aY40/yU4Rs7MWcZa
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Generik.NTDCBOW also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36014433
FireEye	Generic.mg.954ba1f54b2f6b66
ALYac	Trojan.GenericKD.36014433
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 00575b4c1 )
BitDefender	Trojan.GenericKD.36014433
K7GW	Trojan ( 00575b4c1 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.34742.BmX@aqRJV0hi
ESET-NOD32	a variant of Generik.NTDCBOW
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Deapax.gen
ViRobot	Trojan.Win32.Trickbot.442368.A
Ad-Aware	Trojan.GenericKD.36014433
Emsisoft	Trojan.GenericKD.36014433 (B)
F-Secure	Trojan.TR/Redcap.ecqji
DrWeb	Trojan.Packed.140
McAfee-GW-Edition	BehavesLike.Win32.Trickbot.gm
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Avira	TR/Redcap.ecqji
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/TrickBotCrypt.PX!MTB
Gridinsoft	Trojan.Win32.TrickBot.oa!s1
Arcabit	Trojan.Generic.D2258961
AhnLab-V3	Malware/Gen.Reputation.C4290563
ZoneAlarm	HEUR:Trojan.Win32.Deapax.gen
GData	Trojan.GenericKD.36014433
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Trickbot-FTGZ!954BA1F54B2F
VBA32	Malware-Cryptor.InstallCore.6
Panda	Trj/GdSda.A
Fortinet	W32/Agent.KCKB!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.54b2f6

How to remove Generik.NTDCBOW?

Generik.NTDCBOW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X