What is “Generik.FZWDIRV”?

The Generik.FZWDIRV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.FZWDIRV virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generik.FZWDIRV?


File Info:
name: EB796DD92E812E739CF3.mlw
path: /opt/CAPEv2/storage/binaries/0fa0defb231a95e9f873a2d4afd9b3fe4b9cb8dc8b9c7f5357a482711f7e12cf
crc32: A02DE34F
md5: eb796dd92e812e739cf3b1455308712b
sha1: 94c1ce55af0b0fad59b6b63e92fa834c7e233893
sha256: 0fa0defb231a95e9f873a2d4afd9b3fe4b9cb8dc8b9c7f5357a482711f7e12cf
sha512: 63be5a415fab09e4071d48fc14f4d7f2b654743dbb0573ad7b7954fc3faeb43ea3efb2b3cfcb589d1138f6f6ba9e8a948baf0f2bcae11a7570e5fed78d32e1c1
ssdeep: 1536:eNG2CHOH4WAuefXlPTUudpxLHsZIJ8Hg6P9+cC50rrJo:eNGlM47vVTnBLWtg61+cC50Bo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A2A3AEB3B2727456E46A0B3619EB538AAEE46F23041AD64B378CC48CFF21D55CA05753
sha3_384: 077f1d14062429bbb7eeeba7da5114c0c44ff91ea0c07ad0ec4fdf5e98d0c5ec04a3e5e8c7852a79d1f8432f1f17c7ec
ep_bytes: 0020f042002bf0091d4c2f4300a19821
timestamp: 2012-03-07 16:07:50

Version Info:
0: [No Data]

Generik.FZWDIRV also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.eb796dd92e812e73
Cylance	unsafe
Sangfor	Hacktool.Win32.Obfuscator.Vtw2
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5af0b0
BitDefenderTheta	Gen:NN.ZexaF.36196.g0Z@aGPGxdm
Cyren	W32/Zbot.IA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.FZWDIRV
Cynet	Malicious (score: 100)
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Razy-6795826-0
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	VirTool:Win32/Obfuscator.3bd1c332
Rising	Trojan.Generic!8.C3 (CLOUD)
Sophos	Mal/Generic-S
Zillya	Trojan.Generic.Win32.980382
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
Trapmine	malicious.moderate.ml.score
Ikarus	Trojan-Ransom.PornoAsset
Antiy-AVL	Trojan/Win32.AGeneric
Xcitium	Malware@#zckyrg5wbavw
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	VirTool:Win32/Obfuscator.ACP
Google	Detected
AhnLab-V3	Trojan/Win32.Generic.C3603089
McAfee	Artemis!EB796DD92E81
DeepInstinct	MALICIOUS
Malwarebytes	Trojan.Agent
Tencent	Win32.Trojan.Generic.Edhl
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Generic.AP.1E19D70!tr
AVG	Sf:Agent-A [Trj]
Avast	Sf:Agent-A [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Generik.FZWDIRV?

Generik.FZWDIRV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X