Malware

Generik.BAEZMMP removal instruction

Malware Removal

The Generik.BAEZMMP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.BAEZMMP virus can do?

  • Detected script timer window indicative of sleep style evasion
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Attempts to interact with an Alternate Data Stream (ADS)

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.BAEZMMP?


File Info:

crc32: ECDF8B00
md5: d69e8159dd0dd4f221167fe763f5330f
name: mozilla.exe
sha1: 2065fe0402675fae3d7fcc9e17e54dabf05b3ddd
sha256: 97a6154068952254d56ce3a94b9f46f920379e149c99f037c06d79cefad08311
sha512: eb2b46ce7edb16ea754c4470bf989ce34f8b9c88c1e5699a5fa193904adc079ebedd3cbbd6ac1d79db2c24cfc50a10a88d51ff2dc74bce982da48cc23ab7e331
ssdeep: 49152:W+NMeQSl8d6LQFS76JRvOJ+Z8v11zSUAWH8uXFUnudllfTbcYx:Q08fSWJR2J+CdArWFXeYgK
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Generik.BAEZMMP also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanGen:Variant.Strictor.191993
FireEyeGeneric.mg.d69e8159dd0dd4f2
CylanceUnsafe
ZillyaTrojan.Generic.Win32.108792
SangforMalware
K7AntiVirusTrojan ( 0054f7ba1 )
BitDefenderGen:Variant.Strictor.191993
K7GWTrojan ( 0054f7ba1 )
Cybereasonmalicious.9dd0dd
Invinceaheuristic
F-ProtW32/Rasftuby.D
SymantecRansom.Wannacry
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Malware.Rasftuby-7369445-0
GDataGen:Variant.Strictor.191993
KasperskyTrojan.Win32.Vasal.avr
AlibabaTrojan:Win32/Vasal.7472d06e
AegisLabTrojan.Win32.Vasal.4!c
TencentWin32.Trojan.Vasal.Wsag
Endgamemalicious (moderate confidence)
SophosMal/Generic-S
ComodoMalware@#3ej0eoilvr3d0
F-SecureHeuristic.HEUR/AGEN.1122954
DrWebTrojan.DownLoader33.44164
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Ransomware.vc
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Strictor.191993 (B)
CyrenW32/Trojan.BIIU-4289
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1122954
eGambitUnsafe.AI_Score_100%
MicrosoftTrojan:Win32/Occamy.AA
ArcabitTrojan.Strictor.D2EDF9
ZoneAlarmTrojan.Win32.Vasal.avr
AhnLab-V3Dropper/Win32.Agent.R258341
Acronissuspicious
ALYacGen:Variant.Strictor.191993
MAXmalware (ai score=88)
Ad-AwareGen:Variant.Strictor.191993
PandaTrj/Genetic.gen
ESET-NOD32a variant of Generik.BAEZMMP
TrendMicro-HouseCallTROJ_GEN.R015H0CEK20
YandexTrojan.PowerShell!
IkarusTrojan.Rasftuby
FortinetW32/Vasal.AVR!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Win32/Trojan.2ff

How to remove Generik.BAEZMMP?

Generik.BAEZMMP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment