Generik.GFTTWPL removal tips

The Generik.GFTTWPL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.GFTTWPL virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Possible date expiration check, exits too soon after checking local time
Authenticode signature is invalid

How to determine Generik.GFTTWPL?


File Info:
name: 5515527E2A4A1B33725D.mlw
path: /opt/CAPEv2/storage/binaries/6b3d046e0393c0af5ec1404ca637de9ee8f912ef325b4341674bc419cb866064
crc32: 15084AF9
md5: 5515527e2a4a1b33725d96bbd455d292
sha1: 4c961070e9bd41de42c08112be95ee7eaf042f84
sha256: 6b3d046e0393c0af5ec1404ca637de9ee8f912ef325b4341674bc419cb866064
sha512: 89ab056490d544b81e5a9199c58546ed43e847444c3a478c6e06ce4c110876569b7b9bb88c622d48698fa5ad2160b86d7c79a894b00e2821f0e543998563d3f7
ssdeep: 192:PYbLc84gEru1HZ1I2YkOTRyEUbTZBCWzC:PY/74K1HPI2YkO8ZEW2
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DA1265E237E99D87EA15637C11CAC676363CF9E02B53CB13412069371B92BC23BD8242
sha3_384: 902a1aedefca9ee326241e8a16faa160629f8c41539a566215c84f97fa72eeaddefe3f5e53bf18f83f4faa1da7c3e045
ep_bytes: 5589e583ec08e8a1ffffff31c0c9c390
timestamp: 2012-10-16 17:39:51

Version Info:
0: [No Data]

Generik.GFTTWPL also known as:

Lionic	Hacktool.Win32.Mircer.3!c
DrWeb	BackDoor.ProRat.3678
MicroWorld-eScan	Trojan.GenericKD.32094947
FireEye	Trojan.GenericKD.32094947
ALYac	Trojan.GenericKD.32094947
Cylance	Unsafe
Zillya	Exploit.Mircer.Win32.18
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Mircer.6f00ba47
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.e2a4a1
Cyren	W32/Mircer.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.GFTTWPL
TrendMicro-HouseCall	TROJ_MIRCER_BK08401D.TOMC
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.GenericKD.32094947
NANO-Antivirus	Trojan.Win32.ProRat.bazjgf
Avast	Win32:Malware-gen
Ad-Aware	Trojan.GenericKD.32094947
Sophos	Mal/Generic-S
Comodo	Exploit.Win32.Mircer.B@4rcg3v
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_MIRCER_BK08401D.TOMC
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.32094947 (B)
Ikarus	Exploit.Win32.Mircer
GData	Trojan.GenericKD.32094947
Jiangmin	Exploit.Mircer.i
Antiy-AVL	Trojan/Generic.ASMalwS.527F4
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!5515527E2A4A
MAX	malware (ai score=84)
VBA32	TScope.Malware-Cryptor.SB
APEX	Malicious
Yandex	Trojan.GenAsa!SI9s82EtGvc
Fortinet	W32/Mircer.AGC!exploit
Webroot	W32.Trojan.Gen
AVG	Win32:Malware-gen
Panda	Trj/CI.A

How to remove Generik.GFTTWPL?

Generik.GFTTWPL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X