Malware

Generic.Jamg.4.CF22EED7 removal

Malware Removal

The Generic.Jamg.4.CF22EED7 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Jamg.4.CF22EED7 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Created a service that was not started
  • Anomalous binary characteristics

How to determine Generic.Jamg.4.CF22EED7?


File Info:

crc32: 6C2259C1
md5: 5b63674c0cab723b39bc6994863c97cc
name: 5B63674C0CAB723B39BC6994863C97CC.mlw
sha1: 2aa84a69a0166115951c2f58eccd89048ddf99c8
sha256: 1dcfe3bcddcacbd270a9809afc301f1b0dbc7dd3e2c8402085a478e44c62272a
sha512: d57bdd896256f32c3870273a4e5bdc899a40b54f956eb3759838e109658433d5f12b8a6d4baef03677b64b70938f8b172d7cd38c5867134b7dd5ae1757bb411c
ssdeep: 12288:MunnnnnnnnnswnnnnnnnnnLSNVWSQ6nnnnnnnnngnnnnnnnnnnWbGlnnnnnnnnn:MPWG4AvC79i
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: REGEDIT
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Registry Editor
OriginalFilename: REGEDIT.EXE
Translation: 0x0409 0x04b0

Generic.Jamg.4.CF22EED7 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005360cc1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacDeepScan:Generic.Jamg.4.CF22EED7
CylanceUnsafe
ZillyaTrojan.Generic.Win32.111820
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Katusha.fff2836d
K7GWTrojan ( 005360cc1 )
Cybereasonmalicious.c0cab7
CyrenW32/Ekstak.C.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GIIA
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
ClamAVWin.Malware.Dangeroussig-6803894-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Jamg.4.CF22EED7
NANO-AntivirusTrojan.Win32.Ekstak.fezukl
MicroWorld-eScanDeepScan:Generic.Jamg.4.CF22EED7
TencentWin32.Trojan.Generic.Sxep
Ad-AwareDeepScan:Generic.Jamg.4.CF22EED7
SophosMal/Generic-S
ComodoTrojWare.Win32.Ekstak.GII@7qbjxu
BitDefenderThetaGen:NN.ZexaF.34266.8m0@aO4nZTuQ
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojan.Win32.EKSKTAK.SM
McAfee-GW-EditionBehavesLike.Win32.Trickbot.dm
FireEyeGeneric.mg.5b63674c0cab723b
EmsisoftDeepScan:Generic.Jamg.4.CF22EED7 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/ICLoader.Gen8
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.26E30C7
MicrosoftTrojan:Win32/Occamy.C
ArcabitDeepScan:Generic.Jamg.4.CF22EED7
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
GDataDeepScan:Generic.Jamg.4.CF22EED7
AhnLab-V3PUP/Win32.ICLoader.R231002
Acronissuspicious
McAfeePacked-FOJ!5B63674C0CAB
MAXmalware (ai score=100)
VBA32BScope.Trojan.Ekstak
MalwarebytesTrojan.Agent
PandaTrj/Genetic.gen
TrendMicro-HouseCallTrojan.Win32.EKSKTAK.SM
YandexTrojan.GenAsa!ff714Wj7ZeY
IkarusPUA.ICLoader
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIIA!tr
AVGWin32:AdwareX-gen [Adw]
Paloaltogeneric.ml

How to remove Generic.Jamg.4.CF22EED7?

Generic.Jamg.4.CF22EED7 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment