Worm

Should I remove “Worm.Generic.896362”?

Malware Removal

The Worm.Generic.896362 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.Generic.896362 virus can do?

  • Unconventionial language used in binary resources: Chinese (Traditional)
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Attempts to modify Explorer settings to prevent file extensions from being displayed
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Worm.Generic.896362?


File Info:

name: 8D10D2DF23AD21044439.mlw
path: /opt/CAPEv2/storage/binaries/2afacdfcfaca86f843bc7f61375e523aac4ba0d1326b9dbb2ceb0184ac4a3e0d
crc32: BC9415BC
md5: 8d10d2df23ad21044439868ab8fb168a
sha1: 9d251aac0868dc8b02338895b7417d5a255e4c65
sha256: 2afacdfcfaca86f843bc7f61375e523aac4ba0d1326b9dbb2ceb0184ac4a3e0d
sha512: 001e997d5562f9c28c10bdd32c310c5cd440b6002b4f29aa5e2cca8982ccc598d5f87fce701bba517f148692561e520c45d39442a681ad265ca9adfa18e194aa
ssdeep: 768:jhZwGM5apsTPNlctKTacN5heXyBAxx2SrM:AGnsTvctKHeECkR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F89387AB750452E4E460CDB22E0301A29B933D339F4A3D5A32A4F73F49755D58B26E2F
sha3_384: 7d872a7d4b2c4c0e602c74214a62ecc44d5083e5dbc15761162b94739823c7f1b4dd56861bce2c8b2c5d67816a37a662
ep_bytes: 558bec6aff687835400068a623400064
timestamp: 2012-08-17 10:50:05

Version Info:

Comments:
CompanyName:
FileDescription:
FileVersion: 1, 0, 0, 1
InternalName: FolderVirus
LegalCopyright:
LegalTrademarks:
OriginalFilename: FolderVirus.EXE
PrivateBuild:
ProductName: PWN
ProductVersion: 1, 0, 0, 1
SpecialBuild:
Translation: 0x0409 0x04b0

Worm.Generic.896362 also known as:

LionicWorm.Win32.Generic.o!c
DrWebTrojan.Siggen15.56168
MicroWorld-eScanWorm.Generic.896362
McAfeeArtemis!8D10D2DF23AD
CylanceUnsafe
K7AntiVirusP2PWorm ( 0058af981 )
K7GWP2PWorm ( 0058af981 )
BitDefenderThetaGen:NN.ZexaF.34062.fq0@aOSY4Lbj
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/AutoRun.Agent.APS
TrendMicro-HouseCallTROJ_GEN.R011C0WKT21
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Bingoml.gen
BitDefenderWorm.Generic.896362
AvastWin32:Dh-A [Heur]
TencentWin32.Worm.Generic.Eawu
Ad-AwareWorm.Generic.896362
EmsisoftWorm.Generic.896362 (B)
TrendMicroTROJ_GEN.R011C0WKT21
McAfee-GW-EditionArtemis!Virus
FireEyeWorm.Generic.896362
SophosMal/Generic-S
GDataWorm.Generic.896362
AviraTR/Autorun.psvbz
MAXmalware (ai score=89)
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
ALYacWorm.Generic.896362
VBA32Trojan.Downloader
APEXMalicious
IkarusWorm.Win32.AutoRun
eGambitUnsafe.AI_Score_91%
FortinetW32/Agent.APS!worm
AVGWin32:Dh-A [Heur]
Cybereasonmalicious.f23ad2
PandaTrj/CI.A

How to remove Worm.Generic.896362?

Worm.Generic.896362 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment