Malware

Generik.CNOCHDB removal instruction

Malware Removal

The Generik.CNOCHDB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.CNOCHDB virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Attempts to create or modify system certificates
  • Anomalous binary characteristics

Related domains:

a.goatgame.co

How to determine Generik.CNOCHDB?


File Info:

crc32: 79B91722
md5: f5dd5649d8f854a0e336e8b163e87e72
name: F5DD5649D8F854A0E336E8B163E87E72.mlw
sha1: 12b44157249daefcbf9f40550484018dc05f9ce0
sha256: 7fc7a0195737fbf748ba7fc63b92b9f171fb5d4a3162d03f1df48486bbf77043
sha512: 6a700307d7755ad6be23c024f13ded4be6fe75e31646a6f8bc8de0acd43f108ef5289ef4b61129760cf7a8b66de54a7e5d9e0cbce1dc88c98055c37cf7d483fc
ssdeep: 1536:s2ZZo9imyVsa/RLu0yayPbELdfjHM+IfDY0AhUwY3VtqRsWEcd2Es8nBsIew+/m:snV8aLald7s+eM03wyzqR2ZI9++/
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2021
InternalName: VncViewe.exe
FileVersion: 1.0.0.1
CompanyName: VncViewe
ProductName: VncViewe
ProductVersion: 1.0.0.1
FileDescription: VncViewe
OriginalFilename: VncViewe.exe
Translation: 0x007f 0x04b0

Generik.CNOCHDB also known as:

CynetMalicious (score: 100)
ALYacGen:Variant.Ser.Cerbu.3635
CylanceUnsafe
ESET-NOD32a variant of Generik.CNOCHDB
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyTrojan-Downloader.Win32.Zenlod.lgl
BitDefenderGen:Variant.Ser.Cerbu.3635
MicroWorld-eScanGen:Variant.Ser.Cerbu.3635
Ad-AwareGen:Variant.Ser.Cerbu.3635
SophosMal/Generic-S
FireEyeGen:Variant.Ser.Cerbu.3635
EmsisoftGen:Variant.Ser.Cerbu.3635 (B)
eGambitUnsafe.AI_Score_92%
GDataGen:Variant.Ser.Cerbu.3635
AhnLab-V3Trojan/Win.Generic.C4617150
MAXmalware (ai score=83)
AVGWin32:MalwareX-gen [Trj]

How to remove Generik.CNOCHDB?

Generik.CNOCHDB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment