Generik.CJBFLJU information

The Generik.CJBFLJU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.CJBFLJU virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
A process created a hidden window
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Detects the presence of Wine emulator via function name
Detects Sandboxie through the presence of a library
Executed a process and injected code into it, probably while unpacking
Deletes its original binary from disk
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Spoofs its process name and/or associated pathname to appear as a legitimate process
Creates a hidden or system file
Checks the version of Bios, possibly for anti-virtualization
Checks the presence of disk drives in the registry, possibly for anti-virtualization
Detects VirtualBox through the presence of a registry key
Detects VMware through the presence of a registry key
Creates a copy of itself
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients
Mimics icon used for popular non-executable file format
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generik.CJBFLJU?


File Info:
crc32: E69A9518
md5: 14958e2b8f4c94b9e68d7f49c39b280d
name: 14958E2B8F4C94B9E68D7F49C39B280D.mlw
sha1: 48d4a65cb69d76285a337abd30bfd22556db74df
sha256: 0ff48b0aa04d33a036b4dd3cf4eab9ded7ec2f14d40b1e135c96fbe965312160
sha512: b203b06b82e20307773377e640371a18da73d7c4218b7b6775a10c1f90491a9dd1d831420c10c42e8d451e6704e329a40ded58751431f973fa8f68ff633dd86e
ssdeep: 12288:wGvLm+ooLLoS60/K7yh08GgOTWgASIwzjGiwsR6Y987DzpBtWvHmgxQu0d8TcM4:wGvdooLA8GgxDWcsgPVIHmwO
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: vzhxzbL.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Windows_Forms_Books
ProductVersion: 1.0.0.0
FileDescription: Windows_Forms_Books
OriginalFilename: vzhxzbL.exe

Generik.CJBFLJU also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Faker.F.gen!Eldorado
Symantec	Scr.Malcode!gdn30
ESET-NOD32	a variant of Generik.CJBFLJU
APEX	Malicious
Kaspersky	UDS:Backdoor.MSIL.Androm.gen
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34684.7m0@aeXRcyc
FireEye	Generic.mg.14958e2b8f4c94b9
SentinelOne	Static AI – Malicious PE
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Trojan:Win32/AgentTesla!ml
McAfee	Artemis!14958E2B8F4C
Malwarebytes	Glupteba.Backdoor.Bruteforce.DDS
Yandex	Trojan.AvsArher.bUbzqH
Ikarus	Trojan.Dropper
Fortinet	MSIL/GenKryptik.FCYP!tr
Paloalto	generic.ml

How to remove Generik.CJBFLJU?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generik.CJBFLJU information