Generik.FFURGJZ (file analysis)

The Generik.FFURGJZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.FFURGJZ virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Generik.FFURGJZ?

File Info:
name: 03B8ED9918251F2670ED.mlw
path: /opt/CAPEv2/storage/binaries/f9495894b0e5ff4a6d998a3897ad0824575a641ca752189548c3a3eaeba86b50
crc32: 2D39DB9A
md5: 03b8ed9918251f2670ed25cd3fbb56fd
sha1: 6cd908dd369a18f992e4cbf88202ad3c0b6fc894
sha256: f9495894b0e5ff4a6d998a3897ad0824575a641ca752189548c3a3eaeba86b50
sha512: 7f5d7639f83411418d4ccd98e7a50337c80433037b6cbb6e8a636b17bc8810fc964a77526483af6f6d6c48e75e30a74ebfdf6351c42c371f3bb0019b0bf75aa7
ssdeep: 1536:+VNEfxvOYM9zqqYyIow2MJCaiqHWWzpatef6O0+DZFT+eP6TfXkcOalSJWYwTLy:UE9lwdYyIow2MJCaidewtUY+fT+eP2fo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18B73F106DA29EA96E0CBA8350F759351157FBC670A2D991F3B9C33AB7E30D830E05617
sha3_384: 44817ca84f30cdb016c53bc6f84942493b94ca9c28efa16d56efd89c7c8e9457f442d127b40ba62669c53253ba18a845
ep_bytes: b82c6744005064ff3500000000648925
timestamp: 2011-11-16 01:00:22

Version Info:
Comments: 
CompanyName: Auto Debug System
FileDescription: Kill Process Module
FileVersion: 1, 1, 1, 10
InternalName: KillProcess
LegalCopyright: Copyright 2003-2007 Auto Debug System
LegalTrademarks: 
OriginalFilename: KillProcess.exe
PrivateBuild: 
ProductName: KillProcess Module
ProductVersion: 1, 1, 1, 10
SpecialBuild: 
Translation: 0x0409 0x04b0

Generik.FFURGJZ also known as:

How to remove Generik.FFURGJZ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.