Generik.GAZATIQ (file analysis)

The Generik.GAZATIQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.GAZATIQ virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Generik.GAZATIQ?


File Info:
name: 39A4C86786D4AE7C0283.mlw
path: /opt/CAPEv2/storage/binaries/9e5388f8783c3f1f981be5f9594eb7a1d3cac432db56919abf3b1bba97fcb66c
crc32: DB61407D
md5: 39a4c86786d4ae7c02835bd4eb8568dc
sha1: d9a4ebae6f957224e29e0c2f29e380e0798052f3
sha256: 9e5388f8783c3f1f981be5f9594eb7a1d3cac432db56919abf3b1bba97fcb66c
sha512: 62551049008185eb1dbfd5615ddb239e0238eeccf503e3e1d9690cfe912031b452feec0b56545672b0764fac6e27f0bd0273f7fb40cec929cfd8af011740a006
ssdeep: 98304:X7PYOXwnS4rV4eUJF3noxDtOgchv7Stx9Fa:UI532NCvUx9k
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10D268D26FFE08879E1735270597AA36D927ABD704B70854F23943A29DE70FD09A35323
sha3_384: c02ac7fa0a68309a7f43aa1f8930693380ccc507ff057f46c27c38631e434b974d46a9c5c2fc17691bb17e5d0c53e89e
ep_bytes: 6a746898af4000e8db02000033db895d
timestamp: 2008-05-31 04:53:42

Version Info:
0: [No Data]

Generik.GAZATIQ also known as:

Bkav	W32.AIDetect.malware2
Lionic	Worm.Win32.AutoRun.o!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38899737
FireEye	Generic.mg.39a4c86786d4ae7c
McAfee	Artemis!39A4C86786D4
Cylance	Unsafe
Sangfor	Worm.Win32.AutoRun.vx
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
Cyren	W32/Sabsik.M.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.GAZATIQ
APEX	Malicious
Avast	Win32:VB-FBX
Cynet	Malicious (score: 100)
Kaspersky	Worm.Win32.AutoRun.vx
BitDefender	Trojan.GenericKD.38899737
NANO-Antivirus	Trojan.Win32.AutoRun.iwqnep
Tencent	Win32.Trojan.Generik.Lmbc
Ad-Aware	Trojan.GenericKD.38899737
Emsisoft	Trojan.GenericKD.38899737 (B)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.rh
Sophos	Mal/Generic-S
Paloalto	generic.ml
Jiangmin	Packed.Krap.gvwv
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.GenericKD.38899737
VBA32	Worm.Autorun
ALYac	Trojan.GenericKD.38899737
MAX	malware (ai score=83)
Malwarebytes	Malware.AI.3696146603
TrendMicro-HouseCall	TROJ_GEN.R03BH0CAR22
Rising	Worm.VB!1.DA41 (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/AutoRun.45EA!tr
AVG	Win32:VB-FBX
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Generik.GAZATIQ?

Generik.GAZATIQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X