Malware

Generik.CFKFDLE removal

Malware Removal

The Generik.CFKFDLE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.CFKFDLE virus can do?

  • Presents an Authenticode digital signature
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Generik.CFKFDLE?


File Info:

crc32: 8D991F92
md5: 8bba615c200de62e9c1483efef4f7120
name: 8BBA615C200DE62E9C1483EFEF4F7120.mlw
sha1: e09166f57d3a5f2cea0b752d6d1fc70679549459
sha256: 1c1f7de4685bbdfc991375d7bdffad8bde6888b209a79b923281b8b04e0c0f16
sha512: fdf7a7858fb4e60630824912d8c434f8f0799e324fcab7c1746a823aa03dcc57aaa9533c46cd10b0ce645aab4d133930158054125e0c425a016dc6f46abe3ee0
ssdeep: 24576:OQLny3OiG7O5fWcmCM4jBg0nWDqVXF1/Vz897cDH6WboJVIb90Iij+M:OQLy3Z5ecmCMqhnllLNgIHjbiIb9i
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Htxykka
FileVersion: 18.2.8576.36057 (iynalnq_bct.697779-9079)
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
ProductVersion: 18.2.8576.36057
FileDescription: Chf10 Frywncc Lrbxojzzdf
OriginalFilename: JGXYJRF.EXE .ALK
Translation: 0x0409 0x04b0

Generik.CFKFDLE also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00576a981 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop16.9852
CynetMalicious (score: 100)
ALYacGen:Variant.Strictor.255164
CylanceUnsafe
ZillyaTrojan.Alien.Win32.1613
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 00576a981 )
Cybereasonmalicious.c200de
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.CFKFDLE
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Trojan.Generic-9822957-0
KasperskyHEUR:Trojan.Win32.Alien.vho
BitDefenderGen:Variant.Strictor.255164
MicroWorld-eScanGen:Variant.Strictor.255164
TencentMalware.Win32.Gencirc.10ce325c
Ad-AwareGen:Variant.Strictor.255164
SophosML/PE-A
TrendMicroRansom.Win32.CONTI.SMA.hp
FireEyeGeneric.mg.8bba615c200de62e
EmsisoftGen:Variant.Strictor.255164 (B)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Strictor.D3E4BC
GDataGen:Variant.Strictor.255164
AhnLab-V3PUP/Win32.RL_Generic.R364225
MAXmalware (ai score=83)
MalwarebytesTrojan.Dropper.WXT.Generic
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom.Win32.CONTI.SMA.hp
RisingDropper.Certutil!1.D0D0 (CLASSIC)
IkarusTrojan.Barys
FortinetW32/Generik.CFKFDLE!tr
AVGWin32:Trojan-gen
Qihoo-360HEUR/QVM41.1.7447.Malware.Gen

How to remove Generik.CFKFDLE?

Generik.CFKFDLE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment