Categories: Malware

Mal/Generic-R + W32/Nimnul-A removal tips

The Mal/Generic-R + W32/Nimnul-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + W32/Nimnul-A virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Possible date expiration check, exits too soon after checking local time
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Thai
Uses Windows utilities for basic functionality
Sniffs keystrokes
A process was set to shut the system down when terminated
Installs itself for autorun at Windows startup
Likely virus infection of existing system binary
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

ddos.dnsnb8.net

How to determine Mal/Generic-R + W32/Nimnul-A?


File Info:
crc32: 8FDC5D3Amd5: aeb8c6e4bd873e955e0a4868ad38e540name: AEB8C6E4BD873E955E0A4868AD38E540.mlwsha1: 2c8f5d9f5a04e8490e96c06d30c8e9fbfc934b6csha256: 62d869c208b2551a8acc5fc83c9ffb98675f393021e9ad30e60ba02a70bd8e15sha512: fd0e2a4b73f9532048cfa7c297c4d39385e000c9b27a5f983ba6dcb4dcb61edf879ee1aee12a3557afd25b41bd441c476cb35190fcc0672489f344befb91cd62ssdeep: 12288:84RfZ95PBRynSQDVlIsatH8Q7GBtMSujcZGNz3iMqVKbfNYDKBvJFGLd:84RfRCDGB7GBtQ3iFVKbWDKBStype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Mal/Generic-R + W32/Nimnul-A also known as:

Bkav	W32.FamVT.DumpModuleInfectiousNME.PE
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35315162
FireEye	Generic.mg.aeb8c6e4bd873e95
Qihoo-360	Virus.Win32.Agent.P
ALYac	Trojan.GenericKD.35315162
Cylance	Unsafe
VIPRE	Virus.Win32.Small.acea (v)
Sangfor	Malware
K7AntiVirus	Virus ( 0040f7441 )
BitDefender	Trojan.GenericKD.35315162
K7GW	Virus ( 0040f7441 )
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Virus.Otwycal.d
Cyren	W32/PatchLoad.E
Symantec	W32.Wapomi.C!inf
TotalDefense	Win32/Nimnul.A
APEX	Malicious
Avast	Other:Malware-gen [Trj]
ClamAV	Win.Trojan.Downloader-64720
Kaspersky	Virus.Win32.Nimnul.f
Alibaba	Virus:Win32/Nimnul.df11b412
NANO-Antivirus	Trojan.Win32.Banload.cstqaj
ViRobot	Win32.Ramnit.F
AegisLab	Virus.Win32.Nimnul.m1R5
Tencent	Virus.Win32.Loader.aab
Ad-Aware	Trojan.GenericKD.35315162
TACHYON	Virus/W32.Ramnit.C
Emsisoft	Trojan.GenericKD.35315162 (B)
Comodo	Virus.Win32.Wali.KA@558nxg
F-Secure	Malware.W32/Jadtre.B
DrWeb	BackDoor.Darkshell.246
Zillya	Virus.Nimnul.Win32.5
TrendMicro	PE_WAPOMI.BM
McAfee-GW-Edition	BehavesLike.Win32.Generic.bh
Sophos	Mal/Generic-R + W32/Nimnul-A
Ikarus	Trojan-Downloader.Win32.Small
Jiangmin	Win32/Nimnul.f
Webroot	W32.Malware.Gen
Avira	W32/Jadtre.B
Antiy-AVL	Virus/Win32.Nimnul.f
Microsoft	Virus:Win32/Mikcer.B
Gridinsoft	Trojan.Heur!.03002201
Arcabit	Trojan.Generic.D21ADDDA
ZoneAlarm	Virus.Win32.Nimnul.f
GData	Win32.Virus.Wapomi.A
Cynet	Malicious (score: 100)
AhnLab-V3	Win32/VJadtre.Gen
Acronis	suspicious
McAfee	W32/Kudj
MAX	malware (ai score=84)
VBA32	Virus.Nimnul.19209
Panda	W32/Pcarrier.A
Zoner	Virus.Win32.23755
ESET-NOD32	Win32/Wapomi.BA
TrendMicro-HouseCall	PE_WAPOMI.BM
Rising	Virus.Roue!1.9E10 (CLASSIC)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kudj.EC2B!tr
BitDefenderTheta	AI:FileInfector.991137D00F
AVG	Other:Malware-gen [Trj]
Cybereason	malicious.4bd873
Paloalto	generic.ml
MaxSecure	Virus.Nimnul.F