Malware

Generik.BMMCZBD removal tips

Malware Removal

The Generik.BMMCZBD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.BMMCZBD virus can do?

  • Loads a driver
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.163.com
www.sina.com.cn

How to determine Generik.BMMCZBD?


File Info:

crc32: 293598C4
md5: 4a122bbffb7572473b04cb60fff0b64f
name: xp073if62su1.exe
sha1: 6a543c2fa0c9b17ef718c24c463693bc647c0734
sha256: 137af99eb03961ccb318804bffbd10ed427f63fbe59a2dac1d071a11a167b7c8
sha512: 21b40ff30647d0ed04c6a135618d8b627c7db9e5b9eaf3e9b45a46ba095aefcaa878a0cdd951ac43320c241cfea9914b817f205d0b0fd1313ae50fcb659fac28
ssdeep: 6144:hVvLkq1MYttPLdXgK9HkboG/22StayghkqN52V1w58BCp:hVvQUjTdXgK2btRnC1w
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generik.BMMCZBD also known as:

MicroWorld-eScanTrojan.GenericKD.32843230
FireEyeGeneric.mg.4a122bbffb757247
Qihoo-360Generic/Trojan.Generic.891
McAfeeGenericRXHP-OW!4A122BBFFB75
CylanceUnsafe
ZillyaDropper.Agent.Win32.410705
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.32843230
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.fa0c9b
TrendMicroTROJ_GEN.R002C0PJP19
BitDefenderThetaGen:NN.ZexaE.34090.zuW@aCYK@enj
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.BMMCZBD
TrendMicro-HouseCallTROJ_GEN.R002C0PJP19
AvastWin32:Malware-gen
GDataTrojan.GenericKD.32843230
NANO-AntivirusTrojan.Win32.TrjGen.funxrt
AegisLabTrojan.Win32.Generic.4!c
TencentWin32.Trojan.Generic.Pbyw
Endgamemalicious (high confidence)
EmsisoftTrojan.GenericKD.32843230 (B)
DrWebTrojan.Siggen8.31216
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericRXHP-OW!4A122BBFFB75
SophosMal/VMProtBad-A
APEXMalicious
CyrenW32/Trojan.GGSO-5198
Antiy-AVLTrojan/Win32.Occamy
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Generic.D1F525DE
AhnLab-V3Malware/Win32.RL_Generic.R270721
Acronissuspicious
VBA32BScope.Trojan.Tiggre
ALYacTrojan.Agent.Fuery.Gen
MAXmalware (ai score=100)
Ad-AwareTrojan.GenericKD.32843230
MalwarebytesTrojan.jumper
PandaTrj/CI.A
RisingTrojan.Fuery!8.EAFB (CLOUD)
IkarusRootkit.Win64.Agent
eGambitTrojan.Generic
FortinetW32/VMProtBad.A!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
MaxSecureTrojan.Malware.12026031.susgen

How to remove Generik.BMMCZBD?

Generik.BMMCZBD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment