Generik.ECIPFJK (file analysis)

The Generik.ECIPFJK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.ECIPFJK virus can do?

Behavioural detection: Executable code extraction – unpacking
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Generik.ECIPFJK?


File Info:
name: 26A8600360599AB843BA.mlw
path: /opt/CAPEv2/storage/binaries/928bc5296bccd8d4dd8a80c0a386f5a579f9774ac33703f8ef99ea977502818e
crc32: 7BD45714
md5: 26a8600360599ab843ba124b4c5ced92
sha1: ae24d3aca64914fa50bac539082f63eaf74a7bc1
sha256: 928bc5296bccd8d4dd8a80c0a386f5a579f9774ac33703f8ef99ea977502818e
sha512: 92f4241d0a4da6ca1f36ff155a8558a77e58212309661d063fa2844562ca27780bbdfe40b02fb306e401fa31f4033399f83a77c6c52e6a65053b3be10ad71e92
ssdeep: 1536:mQ4dsAKb5NtkhrIsDiyR+cNHGHom5i1BtFb5IDK7HCZVt:4sAo5NtkhZiyR+cNHGH+1b1+jt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AC939223A960A52FE096C6F1583991593827BE3207F06E4F318A6E652773643BDF071F
sha3_384: b153ea0bc108da86385171c8afc4330a9426a85ac7e778451f28606e941f54accee9abbc47904410bc574ee313282d95
ep_bytes: 6878354000e8f0ffffff000048000000
timestamp: 2007-01-31 15:20:06

Version Info:
Translation: 0x0804 0x04b0
CompanyName: 网络X射线
ProductName: explorer
FileVersion: 1.00
ProductVersion: 1.00
InternalName: RECYCLER.BAk
OriginalFilename: RECYCLER.BAk.exe

Generik.ECIPFJK also known as:

Bkav	W32.Common.48A655D3
Lionic	Trojan.Win32.Generic.lzm8
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.fm0@XCDFr9pb
FireEye	Generic.mg.26a8600360599ab8
Skyhigh	BehavesLike.Win32.Generic.mm
McAfee	W32/Autorun.worm.i.gen
Cylance	unsafe
Sangfor	Worm.Win32.AutoRun.V46t
K7AntiVirus	EmailWorm ( 004a86dd1 )
Alibaba	Worm:Win32/AutoRun.df270a16
K7GW	EmailWorm ( 004a86dd1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Heur.EFA4BC
BitDefenderTheta	AI:Packer.D712259A1C
VirIT	Worm.Win32.Generic.BVH
Symantec	W32.SillyFDC
ESET-NOD32	a variant of Generik.ECIPFJK
ClamAV	Win.Worm.VB-2609
Kaspersky	Worm.Win32.AutoRun.pn
BitDefender	Gen:Trojan.Heur.fm0@XCDFr9pb
NANO-Antivirus	Trojan.Win32.AutoRun.toraa
Avast	Win32:AutoRun-C
Tencent	Win32.Worm.Autorun.Ckjl
Emsisoft	Gen:Trojan.Heur.fm0@XCDFr9pb (B)
F-Secure	Trojan.TR/VB.Recycler.A
DrWeb	Win32.HLLW.Autoruner.226
VIPRE	Gen:Trojan.Heur.fm0@XCDFr9pb
TrendMicro	WORM_AUTORUN.KD
Sophos	Mal/Emogen-F
SentinelOne	Static AI – Suspicious PE
Jiangmin	Worm.AutoRun.bmz
Webroot	W32.Autorun.Gen
Google	Detected
Avira	TR/VB.Recycler.A
Antiy-AVL	Worm/Win32.AutoRun
Kingsoft	Win32.HeurC.KVM006.a
Xcitium	Malware@#1mlhfjxs73uli
Microsoft	Worm:Win32/Autorun
ZoneAlarm	Worm.Win32.AutoRun.pn
GData	Gen:Trojan.Heur.fm0@XCDFr9pb
Cynet	Malicious (score: 100)
VBA32	Trojan.Win32.AutoRun.be
ALYac	Gen:Trojan.Heur.fm0@XCDFr9pb
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Malware
TrendMicro-HouseCall	WORM_AUTORUN.KD
Rising	Worm.VB.ank (CLASSIC)
Yandex	Trojan.GenAsa!eGAkiDL3/ok
Ikarus	Trojan.Mepaow
MaxSecure	Trojan.Malware.862965.susgen
Fortinet	W32/AutoRun.BE
AVG	Win32:AutoRun-C
Cybereason	malicious.ca6491
DeepInstinct	MALICIOUS

How to remove Generik.ECIPFJK?

Generik.ECIPFJK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X