Malware

Should I remove “Generik.CAOSSPF”?

Malware Removal

The Generik.CAOSSPF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.CAOSSPF virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Generik.CAOSSPF?


File Info:

crc32: E335E376
md5: af5a963c92b501cbe23bbc30e766c0ed
name: AF5A963C92B501CBE23BBC30E766C0ED.mlw
sha1: 47c0ad496ebec5c8eab584222c1b3c9ce8232472
sha256: 36ab474e5db6bac84fda7736f4138c837af12edf7f0795be54b7e698e0cdb29f
sha512: 2039b98bb560e9d6c610d575243de8e5f2a0633d28d1d6d2c04cadd5a9173c38b494442a68effd8ec6a41c8052a1dfc70d2f8ea5e626f40399839e755f7d4059
ssdeep: 6144:3pVKHeW4hPIj2Y5lW/XUFQTxiMCwny6y:mH34hIj2WFGy
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2013 Nero AG and its licensors
InternalName: NeroDisc
FileVersion: 15,0,25,0
CompanyName: Nero AG
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: NeroDiscMergeWrongDisc
SpecialBuild: 15,0,25,0
ProductVersion: 15,0,25,0
FileDescription: NeroDiscMergeWrongDisc Application
OriginalFilename: NeroDiscMergeWrongDisc.exe
Translation: 0x0409 0x04e4

Generik.CAOSSPF also known as:

K7AntiVirusTrojan ( 0051e08e1 )
LionicTrojan.Win32.Generic.4!c
DrWebTrojan.Encoder.5047
CynetMalicious (score: 99)
CAT-QuickHealDownldr.Freepds.MUE.ZZ5
ALYacGen:Variant.Zusy.320442
CylanceUnsafe
ZillyaTrojan.Generic.Win32.1211713
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaRansom:Win32/Tovicrypt.acf2a1e3
K7GWTrojan ( 0051e08e1 )
Cybereasonmalicious.c92b50
CyrenW32/S-8ecc9d92!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.CAOSSPF
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zusy.320442
NANO-AntivirusTrojan.Win32.CryptXXX.evmiem
MicroWorld-eScanGen:Variant.Zusy.320442
TencentWin32.Trojan.Generic.Lpbm
Ad-AwareGen:Variant.Zusy.320442
SophosMal/Generic-R + Mal/Swizzor-D
ComodoMalware@#1swogndd15mt6
BitDefenderThetaGen:NN.ZexaF.34142.yy0@aaawFfCi
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Crypmic-1
McAfee-GW-EditionBehavesLike.Win32.Generic.fm
FireEyeGeneric.mg.af5a963c92b501cb
EmsisoftGen:Variant.Zusy.320442 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1110705
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.22DAF96
MicrosoftRansom:Win32/Tovicrypt.A
ArcabitTrojan.Zusy.D4E3BA
GDataGen:Variant.Zusy.320442
Acronissuspicious
McAfeeRansomware-GJA!AF5A963C92B5
MAXmalware (ai score=99)
VBA32BScope.Trojan.Bagsu
MalwarebytesMalware.AI.2451378745
PandaTrj/Genetic.gen
TrendMicro-HouseCallMal_Crypmic-1
RisingTrojan.Generic@ML.100 (RDML:hsPPSVr+aLY9wLLju3y53g)
YandexTrojan.GenAsa!/Jktgqz9N7U
IkarusTrojan-Ransom.Tovicrypt
FortinetW32/Kryptik.FNZR!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generik.CAOSSPF?

Generik.CAOSSPF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment