Generik.IEDFEQY malicious file

The Generik.IEDFEQY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.IEDFEQY virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generik.IEDFEQY?


File Info:
name: 26FF6CBE396244358357.mlw
path: /opt/CAPEv2/storage/binaries/d1e732b7554522aca42b4b569de1b06a64ff60a92bc3abe6df1be84da8daaab0
crc32: 3B3A80E4
md5: 26ff6cbe3962443583570aeb616739dc
sha1: 49277508c1fb8ff338ae74081c2604125b6c9eec
sha256: d1e732b7554522aca42b4b569de1b06a64ff60a92bc3abe6df1be84da8daaab0
sha512: 46febc9cc4337c107476f156d44e78962da8e21936ea408e68a9856a8785d09a922bba51e9b515c1b11b8a0ef69345934ea6f987c1f1332b34883bc52584b228
ssdeep: 6144:3A+YfESSu4Di4h9aRzSrOdkKOHKTo2pCDkuFLWQuOLDi4h9aRzSrMf+dP9+xCOwf:3ocSxRzS3r5hIuMQCxRzSwfUFGwTd0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ADD45A1173E88537E0FB067098B59611AB7ABD222F34DB4F6794169E1C327C1AE32367
sha3_384: 02086cf329a72358faf189ab0650a23d99c7a33d12081d22a35041b99939e03a073ed3efac789cb0e06b89f778a6910e
ep_bytes: 6a706820144000e8f701000033db538b
timestamp: 2004-08-04 06:02:34

Version Info:
CompanyName: Microsoft Corporation
FileDescription: CTF Loader
FileVersion: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
InternalName: CTFMON
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: CTFMON.EXE
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.2180
OleSelfRegister: 
Translation: 0x0409 0x04b0

Generik.IEDFEQY also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.26ff6cbe39624435
McAfee	RDN/Generic.dx
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cyren	W32/Olext.C.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Generik.IEDFEQY
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.jm
Sophos	Generic ML PUA (PUA)
Ikarus	Exploit.Win32.RpcDcom
Avira	HEUR/AGEN.1227185
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
Malwarebytes	Lamer.Virus.FileInfector.DDS
APEX	Malicious
SentinelOne	Static AI – Malicious PE
Fortinet	W32/SPNR.15EG12!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Generik.IEDFEQY?

Generik.IEDFEQY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X