About “Generik.FCZRMBG” infection

The Generik.FCZRMBG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.FCZRMBG virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Generik.FCZRMBG?


File Info:
name: 215474E70B3BA32C9A66.mlw
path: /opt/CAPEv2/storage/binaries/7cd9009f883e70e3b84e6660b571cc102179d1957ce3e01e8d1821d20aa29197
crc32: 1FCF1FC7
md5: 215474e70b3ba32c9a66a63bfd584d3a
sha1: 3083e31702dc306e6883fcbf546511892039eb81
sha256: 7cd9009f883e70e3b84e6660b571cc102179d1957ce3e01e8d1821d20aa29197
sha512: 18d23d2fb1347a4288c9a32bd205b1a81559207bdefa09295ddc7fd919a95776b801d84d46c0cf7d8bc13624cdfa97d1bd036163a80418b68bd4ffc5e0696168
ssdeep: 12288:LGqEpmqgHMBNyCNiqhhjpuzfxGeSoG1l:3EpmavNiqheJqoG
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1A0B4DF9F3ED00F11C6511C74C6EBA93507E3A9D723F6CA597E4882D60E427D98DAA3C8
sha3_384: b3fba89f22a144b51d9d33231413bce9790faa50a0412b3953527fe40b0436d69a17127ab1833d9a5206ff52442c903a
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2055-11-03 09:44:52

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: For study
FileVersion: 1.0.0.0
InternalName: For study.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: For study.exe
ProductName: For study
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Generik.FCZRMBG also known as:

MicroWorld-eScan	Gen:Variant.Bulz.297712
FireEye	Generic.mg.215474e70b3ba32c
ALYac	Gen:Variant.Bulz.297712
CrowdStrike	win/malicious_confidence_80% (W)
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Generik.FCZRMBG
TrendMicro-HouseCall	TROJ_GEN.R002H09KT21
Kaspersky	HEUR:Trojan-PSW.MSIL.Reline.gen
BitDefender	Gen:Variant.Bulz.297712
Avast	FileRepMalware
Ad-Aware	Gen:Variant.Bulz.297712
Sophos	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.Bulz.297712 (B)
APEX	Malicious
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.297712
Cynet	Malicious (score: 100)
McAfee	Artemis!215474E70B3B
MAX	malware (ai score=84)
Ikarus	Win32.Outbreak
Fortinet	PossibleThreat
Webroot	W32.Trojan.Gen
AVG	FileRepMalware
Cybereason	malicious.70b3ba

How to remove Generik.FCZRMBG?

Generik.FCZRMBG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X