Categories: Malware

Generik.EAOKAT removal

The Generik.EAOKAT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.EAOKAT virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Drops a binary and executes it
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

heritage.nflfan.org

How to determine Generik.EAOKAT?


File Info:
crc32: 9D589773md5: 60bad4b935f14bfb0eab1022a9ca1ed6name: 60BAD4B935F14BFB0EAB1022A9CA1ED6.mlwsha1: 29136c2dbf07137ac2b65f7818458b2ab592bbf6sha256: 5b6a727dd5cd62e1cf36655941a5226474a76076d53898d3e95fc9151bedfa5fsha512: e0c40c02653f2a695049342491580c78343156f887cb58a53da1316dcb7ca2c850f32b1e4d99d5564e53144cbe154d253563630d0eaeedcfc31ed52087b45563ssdeep: 12288:/JLyEtfoML00jYYp7lTVD/052lhihqWLTcJoSekJVJ9jGk1Zo6Wa8bE99:/JWekYp7zZkhqWLTEoSekJT9jGk1ZPWqtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: (C)Check Point Software Technologies Ltd. 2007-2015 InternalName: StartupsFileVersion: 5.2.26.164CompanyName: Check Point Software Technologies Ltd.ProductName: StartupsLanguages: EnglishProductVersion: 5.2.26.164FileDescription: Nw Octagonal Earliest Tec UbtOriginalFilename: StartupsTranslation: 0x0409 0x04b0

Generik.EAOKAT also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0054f40b1 )
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.MulDrop9.13089
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.44804462
Cylance	Unsafe
Zillya	Backdoor.Poison.Win32.90945
Sangfor	Trojan.Win32.GenericKD.4
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/NetWireRC.2598dc4d
K7GW	Trojan ( 0054f40b1 )
Cybereason	malicious.935f14
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.EAOKAT
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.44804462
NANO-Antivirus	Trojan.Win32.Poison.fqvlda
MicroWorld-eScan	Trojan.GenericKD.44804462
Tencent	Win32.Backdoor.Netwire.Auto
Ad-Aware	Trojan.GenericKD.44804462
Comodo	Malware@#127nhwhx3e6ge
BitDefenderTheta	Gen:NN.ZexaF.34058.Qq0@a8u3Jvfi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WDP21
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.jh
FireEye	Generic.mg.60bad4b935f14bfb
Emsisoft	Trojan.GenericKD.44804462 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Obfuscated.Gen.b
Avira	HEUR/AGEN.1125216
Antiy-AVL	Trojan/Generic.ASMalwS.2BAC7B0
Microsoft	Trojan:Win32/Skeeyah.A!MTB
Arcabit	Trojan.Generic.D2ABA96E
GData	Trojan.GenericKD.44804462
AhnLab-V3	Malware/Win32.Generic.C3977667
McAfee	RDN/Generic.hbg
MAX	malware (ai score=94)
VBA32	BScope.Trojan.Dyre
Malwarebytes	Backdoor.NetWiredRC
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WDP21
Rising	Trojan.Generic@ML.83 (RDMK:UXrS28wPFq8V6raFvkvwVw)
Yandex	Backdoor.Poison!XhW1CZZAo3Y
Ikarus	Backdoor.Win32.NetWireRC
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/Generik.EAOKAT!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwoCHz8A