How to remove “Generik.CWDTAFQ”?

The Generik.CWDTAFQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.CWDTAFQ virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs

How to determine Generik.CWDTAFQ?


File Info:
crc32: EEB30EC9
md5: bf0200dbdb3163d2faf7eb31b9aa7eab
name: BF0200DBDB3163D2FAF7EB31B9AA7EAB.mlw
sha1: 378b019c6617dd461278e6d4fdd14bf5dac20cc9
sha256: f27cc3db697b7bca3da2fee5f6cea7f6270f15636a4fb552389809f4525a202f
sha512: 8d1118811709866f8cd5c733ddcfaa9fbe326d766ceef8a5868f20777e19a382190fa1acd486aeac1bca74b79a030aad929312d77ddaf58f06134ce1402df3e2
ssdeep: 12288:FBQFgglH6AGTih2oCyr2NCiFX8uxLNBJZ25dvWIcLgrbN0/ZiVZQUx2rQ:MFloAGTih2oCyr2NCiFX8uxLNBJZEIa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2008-2017 Kaseya International Limited. All Rights Reserved.
InternalName: KASetup
Open Source: http://www.kaseya.com/jp/open-source.aspx
FileVersion: 9, 4, 0, 12
CompanyName: Kaseya International Limited
LegalTrademarks: http://www.kaseya.com/jp/trademark-guidelines.aspx
Privacy Statement: http://www.kaseya.com/company/privacy-statement.aspx
ProductName: Virtual System Administrator Agent
T&Cs: http://www.kaseya.com/jp/terms.aspx
ProductVersion: 9, 4, 0, 12
FileDescription: Setup for Virtual System Administrator Agent
OriginalFilename: KASetup.exe
Translation: 0x0409 0x04b0

Generik.CWDTAFQ also known as:

Lionic	Trojan.Win32.Generic.4!c
ALYac	Trojan.GenericKD.36392318
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.B
Alibaba	Trojan:Win32/Generic.2b09f248
Cybereason	malicious.bdb316
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.CWDTAFQ
APEX	Malicious
Avast	FileRepMalware
BitDefender	Trojan.GenericKD.36392318
MicroWorld-eScan	Trojan.GenericKD.36392318
Tencent	Win32.Trojan.Patched.Pgco
Ad-Aware	Trojan.GenericKD.36392318
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.BadFile.hh
FireEye	Generic.mg.bf0200dbdb3163d2
Emsisoft	Trojan.GenericKD.36392318 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.ServStart.hn
Avira	TR/Patched.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKD.36392318
Acronis	suspicious
McAfee	Artemis!BF0200DBDB31
MAX	malware (ai score=100)
TrendMicro-HouseCall	TROJ_GEN.R002H0CIG21
Ikarus	Trojan.SuspectCRC
Fortinet	Generik.CWDTAFQ!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Generik.CWDTAFQ?

Generik.CWDTAFQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X