Malware

Generik.DJHFVBI removal guide

Malware Removal

The Generik.DJHFVBI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.DJHFVBI virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • A process attempted to delay the analysis task by a long amount of time.
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.bing.com
api10.laptok.at

How to determine Generik.DJHFVBI?


File Info:

crc32: 60B7B33A
md5: 8478376cc9f6f4143330e13a29910e0e
name: 8478376CC9F6F4143330E13A29910E0E.mlw
sha1: d488c393162adc5aa2915bd165f50ee4cc707768
sha256: 51992453cfe179fa3a637985cba9f5a6d5ab495a268e000f480086821c009f3b
sha512: f0b3d8478a5898c48850f47fd48a1672852893f9992e34ed7f83ae7a761e929f1be2828c0ce4b01175c4fef5aa7cb5eba57885d3562ac0d88ba58a6a7b538e73
ssdeep: 6144:84l2mHDuaB8tWZi6AElOQWjQ5YiheOR5TdauNau7VM/ewgWSMYSaSOPo:MydzZi6ABQvUOXT89u7VMoX7g
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generik.DJHFVBI also known as:

BkavW32.AIDetectGBM.malware.02
Elasticmalicious (high confidence)
Qihoo-360Win32/TrojanPSW.Gozi.HgkASPkA
McAfeeArtemis!8478376CC9F6
AegisLabTrojan.Win32.Generic.4!c
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
RisingTrojan.Generic@ML.85 (RDML:HwQI8455W5uqGa+wvWDirg)
F-SecureTrojan.TR/AD.UrsnifDropper.ykqap
McAfee-GW-EditionArtemis
FireEyeGeneric.mg.8478376cc9f6f414
GDataWin32.Trojan-Spy.Ursnif.YFZPCO
WebrootW32.Trojan.Emotet
AviraTR/AD.UrsnifDropper.ykqap
CynetMalicious (score: 100)
ESET-NOD32a variant of Generik.DJHFVBI
eGambitUnsafe.AI_Score_76%
FortinetMalicious_Behavior.SB
AVGFileRepMalware
AvastFileRepMalware

How to remove Generik.DJHFVBI?

Generik.DJHFVBI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment