Malware

Should I remove “Generik.BAUCHKN”?

Malware Removal

The Generik.BAUCHKN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generik.BAUCHKN virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Harvests cookies for information gathering
  • Anomalous binary characteristics

How to determine Generik.BAUCHKN?



File Info:

name: EDF9179214E504E9E318.mlw
path: /opt/CAPEv2/storage/binaries/f36af45fa60a95a651f781f5071ff4356fd3e7a04863062898420110dfa06fa1
crc32: F976392B
md5: edf9179214e504e9e3188db7831be633
sha1: dd156636ae91aa24adcf87015742617bbdd531b8
sha256: f36af45fa60a95a651f781f5071ff4356fd3e7a04863062898420110dfa06fa1
sha512: 1381a1054c0ceeadd84b25fa01dc5606b3d3f3832ce1939754b1b01ccf19df0c9f1cae38a23aa00b896574b0a5fb3893ddce0e7da6e2114794d18373ccff49c3
ssdeep: 6144:iKg2wV4oLvPh+WdpZglg0TgihDSWULqd1LIF4BBA6o7tugOd/0ecgDsn+zFfAavN:62ghLvPhXpe3Pl5LIziDsn+zVvJPEplE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15DD47CA1A2C241F3CF61563AF460764312609E605F5A8EEF9E49B3198BF97C138A4F1D
sha3_384: 0225e945248bebda118a0ddc882b3ef7f5ea60a1e916e7914d8f3a325e7e27d01ac72cc8d1692547903aaed1f8814ee6
ep_bytes: e89a040000e98efeffff3b0dc8a14300
timestamp: 2019-02-24 19:03:26


Version Info:

0: [No Data]

Generik.BAUCHKN also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Bingo.4!c
MicroWorld-eScanTrojan.Ciusky.Gen.6
FireEyeGeneric.mg.edf9179214e504e9
CAT-QuickHealTrojan.IGENERIC
McAfeeRDN/Generic.dx
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojan:Win32/Redcap.cc8971af
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.214e50
ArcabitTrojan.Ciusky.Gen.6
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Generik.BAUCHKN
TrendMicro-HouseCallTROJ_GEN.R03BC0PKU21
AvastWin32:Malware-gen
ClamAVWin.Malware.Ciusky-9819217-0
KasperskyPDM:HEUR:Trojan.Win32.Bingo.gen
BitDefenderTrojan.Ciusky.Gen.6
TencentWin32.Trojan.Bingo.Apwr
Ad-AwareTrojan.Ciusky.Gen.6
EmsisoftTrojan.Ciusky.Gen.6 (B)
TrendMicroTROJ_GEN.R03BC0PKU21
McAfee-GW-EditionBehavesLike.Win32.Generic.jh
SophosMal/Generic-S
AviraTR/Redcap.gdbyr
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
ViRobotTrojan.Win32.Z.Ciusky.641635
GDataTrojan.Ciusky.Gen.6
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R360088
VBA32Trojan.Bingo
ALYacTrojan.Ciusky.Gen.6
MAXmalware (ai score=80)
MalwarebytesMalware.AI.1083844347
APEXMalicious
MaxSecureTrojan.Malware.108560821.susgen
AVGWin32:Malware-gen
PandaTrj/CI.A

How to remove Generik.BAUCHKN?

Generik.BAUCHKN removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment