Categories: Malware

Generik.ECIPFJK (file analysis)

The Generik.ECIPFJK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.ECIPFJK virus can do?

Behavioural detection: Executable code extraction – unpacking
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Generik.ECIPFJK?


File Info:
name: 26A8600360599AB843BA.mlwpath: /opt/CAPEv2/storage/binaries/928bc5296bccd8d4dd8a80c0a386f5a579f9774ac33703f8ef99ea977502818ecrc32: 7BD45714md5: 26a8600360599ab843ba124b4c5ced92sha1: ae24d3aca64914fa50bac539082f63eaf74a7bc1sha256: 928bc5296bccd8d4dd8a80c0a386f5a579f9774ac33703f8ef99ea977502818esha512: 92f4241d0a4da6ca1f36ff155a8558a77e58212309661d063fa2844562ca27780bbdfe40b02fb306e401fa31f4033399f83a77c6c52e6a65053b3be10ad71e92ssdeep: 1536:mQ4dsAKb5NtkhrIsDiyR+cNHGHom5i1BtFb5IDK7HCZVt:4sAo5NtkhZiyR+cNHGH+1b1+jttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1AC939223A960A52FE096C6F1583991593827BE3207F06E4F318A6E652773643BDF071Fsha3_384: b153ea0bc108da86385171c8afc4330a9426a85ac7e778451f28606e941f54accee9abbc47904410bc574ee313282d95ep_bytes: 6878354000e8f0ffffff000048000000timestamp: 2007-01-31 15:20:06
Version Info:
Translation: 0x0804 0x04b0CompanyName: 网络X射线ProductName: explorerFileVersion: 1.00ProductVersion: 1.00InternalName: RECYCLER.BAkOriginalFilename: RECYCLER.BAk.exe

Generik.ECIPFJK also known as:

Bkav	W32.Common.48A655D3
Lionic	Trojan.Win32.Generic.lzm8
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.fm0@XCDFr9pb
FireEye	Generic.mg.26a8600360599ab8
Skyhigh	BehavesLike.Win32.Generic.mm
McAfee	W32/Autorun.worm.i.gen
Cylance	unsafe
Sangfor	Worm.Win32.AutoRun.V46t
K7AntiVirus	EmailWorm ( 004a86dd1 )
Alibaba	Worm:Win32/AutoRun.df270a16
K7GW	EmailWorm ( 004a86dd1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Heur.EFA4BC
BitDefenderTheta	AI:Packer.D712259A1C
VirIT	Worm.Win32.Generic.BVH
Symantec	W32.SillyFDC
ESET-NOD32	a variant of Generik.ECIPFJK
ClamAV	Win.Worm.VB-2609
Kaspersky	Worm.Win32.AutoRun.pn
BitDefender	Gen:Trojan.Heur.fm0@XCDFr9pb
NANO-Antivirus	Trojan.Win32.AutoRun.toraa
Avast	Win32:AutoRun-C
Tencent	Win32.Worm.Autorun.Ckjl
Emsisoft	Gen:Trojan.Heur.fm0@XCDFr9pb (B)
F-Secure	Trojan.TR/VB.Recycler.A
DrWeb	Win32.HLLW.Autoruner.226
VIPRE	Gen:Trojan.Heur.fm0@XCDFr9pb
TrendMicro	WORM_AUTORUN.KD
Sophos	Mal/Emogen-F
SentinelOne	Static AI – Suspicious PE
Jiangmin	Worm.AutoRun.bmz
Webroot	W32.Autorun.Gen
Google	Detected
Avira	TR/VB.Recycler.A
Antiy-AVL	Worm/Win32.AutoRun
Kingsoft	Win32.HeurC.KVM006.a
Xcitium	Malware@#1mlhfjxs73uli
Microsoft	Worm:Win32/Autorun
ZoneAlarm	Worm.Win32.AutoRun.pn
GData	Gen:Trojan.Heur.fm0@XCDFr9pb
Cynet	Malicious (score: 100)
VBA32	Trojan.Win32.AutoRun.be
ALYac	Gen:Trojan.Heur.fm0@XCDFr9pb
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Malware
TrendMicro-HouseCall	WORM_AUTORUN.KD
Rising	Worm.VB.ank (CLASSIC)
Yandex	Trojan.GenAsa!eGAkiDL3/ok
Ikarus	Trojan.Mepaow
MaxSecure	Trojan.Malware.862965.susgen
Fortinet	W32/AutoRun.BE
AVG	Win32:AutoRun-C
Cybereason	malicious.ca6491
DeepInstinct	MALICIOUS