Malware

Generik.CEFDLBU removal tips

Malware Removal

The Generik.CEFDLBU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.CEFDLBU virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Creates a hidden or system file
  • Creates a copy of itself

How to determine Generik.CEFDLBU?


File Info:

crc32: 18704BF2
md5: 3daaf5bef9def939d62d805a8d001130
name: SWIFT COPY PRINTOUT.exe
sha1: 8b286f38dcd05603485d69a5556aba032001774d
sha256: 4472980b73c40826e4102b0fe6ec2aba666173130b8af8c824643c157c538465
sha512: f783d7fe45f9106ed4e5ff49ab0350eae1d7f15687fd1dc3e42bcf0a58ef1df98f3c02a0fdcd5abcabed4387576dd1741a7125b9073d523bd5f92212f573fb49
ssdeep: 24576:ivk3Roh8vxdESBAI2gIlhHIXRw/VTs7qQS/N0E3j2zcxW8:ivcohGESBAHcsVf/N0E3j2zcM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: (C) 2019 PBC Today
Assembly Version: 17.0.0.9
InternalName: tZJs.exe
FileVersion: 17.0.2.0
CompanyName: PBC Today
LegalTrademarks: PBC Today
Comments: UK's housing
ProductName: Apartment Management System
ProductVersion: 17.0.2.0
FileDescription: Apartment Management System
OriginalFilename: tZJs.exe

Generik.CEFDLBU also known as:

Qihoo-360Generic/Trojan.PSW.374
McAfeeArtemis!3DAAF5BEF9DE
MalwarebytesTrojan.Crypt.MSIL
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
CyrenW32/MSIL_Kryptik.BZE.gen!Eldorado
APEXMalicious
KasperskyUDS:DangerousObject.Multi.Generic
F-SecureTrojan.TR/AD.Remcos.yxyde
DrWebTrojan.Inject4.3892
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.3daaf5bef9def939
SentinelOneDFI – Malicious PE
AviraTR/AD.Remcos.yxyde
MicrosoftTrojan:Win32/Wacatac.C!ml
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataWin32.Backdoor.Remcos.6NSJNJ
AhnLab-V3Win-Trojan/MDA.630F094C.X1386
CylanceUnsafe
ESET-NOD32a variant of Generik.CEFDLBU
BitDefenderThetaGen:NN.ZemsilF.34590.Dn0@ay1scGm
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Generik.CEFDLBU?

Generik.CEFDLBU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment