Categories: Malware

About “Win32/GenCBL.DC” infection

The Win32/GenCBL.DC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenCBL.DC virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Uses Windows utilities for basic functionality
Anomalous binary characteristics

How to determine Win32/GenCBL.DC?


File Info:
crc32: 46348C34md5: 6dc0146d3ebdae555f49eaffca93b103name: 6DC0146D3EBDAE555F49EAFFCA93B103.mlwsha1: b67a41ccee9f9d5929d9cb79cc8bf1d52dad25bbsha256: f8037c9e711194be28ea3108f1e7df6c69074dedb7cbcadc3d4ec464d4ae81a3sha512: 9098eb39e28a1301e7b577db958596923ee76d06875758b159e84c0e3a3478bd30b2d0063f8e2390686586c4c2da8397928942b58f661edb421f3d028d6abcdessdeep: 6144:vGC/eaklZzmm+a0rkG6LgwLUIW2KXPqD8Qz+Xu+iPQeARoLwl:XVtmdvDk2UXPSj+XuJsPltype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/GenCBL.DC also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	BackDoor.Qbot.548
MicroWorld-eScan	Gen:Variant.Razy.769380
FireEye	Generic.mg.6dc0146d3ebdae55
ALYac	Gen:Variant.Razy.769380
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Backdoor ( 0056d6b31 )
BitDefender	Gen:Variant.Razy.769380
K7GW	Backdoor ( 0056d6b31 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.34634.kjX@aK!qono
Cyren	W32/Qbot.AD.gen!Eldorado
Symantec	Trojan.Maltrec.TS
Avast	Win32:DangerousSig [Trj]
ClamAV	Win.Malware.Qbot-9778469-0
Kaspersky	HEUR:Trojan.Win32.Bsymem.pef
NANO-Antivirus	Virus.Win32.Gen.ccmw
Rising	Trojan.MalCert!1.CD7F (CLASSIC)
Ad-Aware	Gen:Variant.Razy.769380
Sophos	Mal/EncPk-APW
Comodo	TrojWare.Win32.PkdKrap.Gx@27uldg
F-Secure	Heuristic.HEUR/AGEN.1139238
Invincea	Mal/EncPk-APW
McAfee-GW-Edition	GenericRXMN-SN!6DC0146D3EBD
SentinelOne	Static AI – Malicious PE
Emsisoft	MalCert.A (A)
Jiangmin	Trojan.Bsymem.aii
eGambit	PE.Heur.InvalidSig
Avira	HEUR/AGEN.1139238
Microsoft	Trojan:Win32/Qakbot.KSH!cert
Arcabit	Trojan.Razy.DBBD64
ZoneAlarm	HEUR:Trojan.Win32.Bsymem.pef
GData	Win32.Trojan.PSE.1JM9N48
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.QBot.R353257
McAfee	GenericRXMN-SN!6DC0146D3EBD
MAX	malware (ai score=88)
Malwarebytes	Trojan.MalPack.Generic
Panda	Trj/Genetic.gen
APEX	Malicious
ESET-NOD32	a variant of Win32/GenCBL.DC
Fortinet	W32/GenCBL.DK!tr
AVG	Win32:DangerousSig [Trj]
Cybereason	malicious.cee9f9
Qihoo-360	HEUR/QVM20.1.3E7F.Malware.Gen