Should I remove “Generik.DHFGGCO”?

The Generik.DHFGGCO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.DHFGGCO virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generik.DHFGGCO?


File Info:
name: 7A99FC743F7AC0E38002.mlw
path: /opt/CAPEv2/storage/binaries/af02c703f7eb3adbfce3e0cdf3eb4f075c046b256f2a2d4cc2109f08ba80f186
crc32: 70383456
md5: 7a99fc743f7ac0e3800237e53f50733a
sha1: 3d663bf2f1735edef36e7a35d3d873861393bc5a
sha256: af02c703f7eb3adbfce3e0cdf3eb4f075c046b256f2a2d4cc2109f08ba80f186
sha512: 4763afc32e0163b4060dac055cc5e6d215c5bc2823ecef4dbabe1972742e4b54d0df3a68f5927eb7870fa1413530c7c3cb5bacdc83ece4d9e97f2cbddb68e1e1
ssdeep: 384:hy73nutkh5nLgBPddQH/NMsNozwCpdwjD9Ov50lzTDQFUr:k6kh5nWLQF/NwwC0S50BQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AF2309892A8B2562D0CA01385804D52AA0656F4411FFCF93EC9667FBDE8F6F52814AF3
sha3_384: 950a0fdd2cd3850ed33526f797d6ed3d081a75809a465cd3783956e706b6a6d5f603b51fd53b3a0ef82bc4e580bdae4e
ep_bytes: 00000000000000000000000000000000
timestamp: 2006-03-02 17:50:37

Version Info:
0: [No Data]

Generik.DHFGGCO also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agentb.X!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.ECLZ
ClamAV	Win.Malware.Eclz-9953021-0
FireEye	Generic.mg.7a99fc743f7ac0e3
ALYac	Trojan.Agent.ECLZ
Cylance	unsafe
Zillya	Trojan.Agent.Win32.3206972
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Generic.c5321765
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.43f7ac
Arcabit	Trojan.Agent.ECLZ
Cyren	W32/S-9d209b27!Eldorado
ESET-NOD32	a variant of Generik.DHFGGCO
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agentb.bxov
BitDefender	Trojan.Agent.ECLZ
Avast	Win32:Evo-gen [Trj]
Tencent	Worm.Win32.Agent.zbj
Emsisoft	Trojan.Agent.ECLZ (B)
F-Secure	Trojan.TR/Crypt.ULPM.Gen
VIPRE	Trojan.Agent.ECLZ
McAfee-GW-Edition	BehavesLike.Win32.Generic.pz
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Multi.jtl
Avira	TR/Crypt.ULPM.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Trojan.Win32.Agentb.bxov
GData	Trojan.Agent.ECLZ
Google	Detected
AhnLab-V3	Worm/Win32.Agent.R304664
McAfee	GenericRXKJ-LP!7A99FC743F7A
MAX	malware (ai score=83)
Malwarebytes	Generic.Trojan.Malicious.DDS
Panda	Trj/Chgt.AD
Rising	Trojan.Generic@AI.100 (RDMK:jvyLvB8+59ohXZmhX96/ow)
Ikarus	Trojan.Crypt
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Generik.DHFGGCO?

Generik.DHFGGCO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X