Generik.JCWNBXI removal

The Generik.JCWNBXI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.JCWNBXI virus can do?

Unconventionial language used in binary resources: Korean
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Generik.JCWNBXI?


File Info:
crc32: 71C2D1A8
md5: b3e46a3d09a4ce1ec4ba3128288fdcc3
name: main.exe
sha1: ecda6da064de527689c6399a9f3c30917bfdbf7c
sha256: 72cfe6f80eba1028f06bc66aac1faac001962627e54be3da505cf8fad0ef6935
sha512: 7d3f140507ce4d6b586a027cf9985e6dc45319e05c807b12027eb10615a6758afd10889b7f5c844dcd14a4db3ecd8fb8236e063143dfa23f87fec1065a90fcc9
ssdeep: 24576:KDIMENIqiOwyMPF1x++QgOrnlLsIK62uh4PfXPMnYoE+PurAjFpRtB77BtHtRkL:SIMETnMXxh0lcPVaur4FfXNRk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright x24d2 2002
InternalName: main
FileVersion: 0, 97, 2, 0
CompanyName: WebZen
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: WebZen mu main
SpecialBuild: 
ProductVersion: 1, 0, 0, 1
FileDescription: main
OriginalFilename: main.exe
Translation: 0x0412 0x04b0

Generik.JCWNBXI also known as:

Bkav	W32.HfsAutoB.
MicroWorld-eScan	Trojan.GenericKD.33263356
FireEye	Generic.mg.b3e46a3d09a4ce1e
ALYac	Trojan.GenericKD.33263356
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.33263356
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.064de5
TrendMicro	TROJ_GEN.R015C0PBD20
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Agent-704584
GData	Trojan.GenericKD.33263356
Kaspersky	Packed.Win32.PePatch.dk
Alibaba	Packed:Win32/PePatch.b821164d
NANO-Antivirus	Trojan.Win32.BlackHole.hasjon
ViRobot	Trojan.Win32.Z.Pepatch.5128192.A
AegisLab	Virus.Win32.Nimnul.lf2q
Rising	Malware.Undefined!8.C (CLOUD)
Ad-Aware	Trojan.GenericKD.33263356
Emsisoft	Trojan.GenericKD.33263356 (B)
Comodo	Packed.Win32.PePatch.d01@48x93y
F-Secure	Trojan.TR/PePatch.iqwad
DrWeb	BackDoor.BlackHole.53145
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fujacks.rz
Trapmine	suspicious.low.ml.score
Sophos	Mal/Agent-YB
Ikarus	Virus.Win32.Sality
Jiangmin	Packed.PePatch.hkf
Avira	TR/PePatch.iqwad
MAX	malware (ai score=87)
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1FB8EFC
ZoneAlarm	Packed.Win32.PePatch.dk
Microsoft	Trojan:Win32/Occamy.C
Acronis	suspicious
McAfee	GenericRXAA-FQ!B3E46A3D09A4
TACHYON	Trojan/W32.Packed.5128192
Panda	Trj/CI.A
ESET-NOD32	a variant of Generik.JCWNBXI
TrendMicro-HouseCall	TROJ_GEN.R015C0PBD20
Tencent	Win32.Trojan.Generik.Pgwi
SentinelOne	DFI – Malicious PE
Fortinet	W32/PePatch.DK!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Generic/Trojan.d87

How to remove Generik.JCWNBXI?

Generik.JCWNBXI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X