Malware

Generik.FWPSSGI removal

Malware Removal

The Generik.FWPSSGI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.FWPSSGI virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Unusual version info supplied for binary

How to determine Generik.FWPSSGI?


File Info:

crc32: 57711AB2
md5: 2e19d4e189cdc21f39d807085599aa0e
name: 2205a01938abgs.exe
sha1: 7e46b37b8d4d3cc0f1ad29ee5b90b9ec6583354b
sha256: e57299eb70d71b217aece7b0f9eeae940fd1c7c8a5b23c2f3e91bdb44f319dd7
sha512: 02e6119db866713e740a399e1bdc9098b3d410771167bfcd1c791f30f664d9408a7d73e641f008f584c958f5398ac9c6be621070fb8f84d99bed18ebef66f180
ssdeep: 6144:gIWQeCCxoCa4EzEuP3K95X0H2kOU3vkjD8m3BZbyqP2X/r:gIWQsoCaJr/Kjo8jD8EP2D
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: BthCxn.exe
FileVersion: 6.0.6000.16384
CompanyName: Windows (R) Codename Longhorn DDK provider
ProductName: Windows (R) Codename Longhorn DDK driver
ProductVersion: 6.0.6000.16384
FileDescription: Bluetooth Connection Sample Application
OriginalFilename: BthCxn.exe
Translation: 0x0409 0x04b0

Generik.FWPSSGI also known as:

BkavW32.AIDetectVM.malwareB
MicroWorld-eScanGen:Variant.Mikey.113712
McAfeeGenericRXAA-AA!2E19D4E189CD
CylanceUnsafe
SangforMalware
BitDefenderGen:Variant.Mikey.113712
Cybereasonmalicious.b8d4d3
TrendMicroMal_Cerber-23
APEXMalicious
AvastWin32:Malware-gen
GDataGen:Variant.Mikey.113712
RisingMalware.Undefined!8.C (TFE:dGZlOgW7RLSSDcOgpA)
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Mikey.113712 (B)
F-SecureTrojan.TR/AD.TrickBot.pjhaw
DrWebTrojan.Packed.140
Invinceaheuristic
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.2e19d4e189cdc21f
AviraTR/AD.TrickBot.pjhaw
MAXmalware (ai score=83)
MicrosoftTrojan:Win32/TrickBot.ARJ!MTB
ArcabitTrojan.Mikey.D1BC30
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZexaF.34128.uu1@aGTj4nai
ALYacGen:Variant.Mikey.113712
MalwarebytesTrojan.TrickBot
ESET-NOD32a variant of Generik.FWPSSGI
TrendMicro-HouseCallMal_Cerber-23
SentinelOneDFI – Malicious PE
FortinetW32/GenKryptik.EMQO!tr
Ad-AwareGen:Variant.Mikey.113712
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360HEUR/QVM41.1.FF3B.Malware.Gen

How to remove Generik.FWPSSGI?

Generik.FWPSSGI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment