About “Generik.JLUCFGZ” infection

The Generik.JLUCFGZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.JLUCFGZ virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generik.JLUCFGZ?


File Info:
name: 1BED53CECDFFD710430B.mlw
path: /opt/CAPEv2/storage/binaries/8a1b84606a80ada539b2ee3979d461e263efa02cdd3c63527e6175b7c6d89b62
crc32: 01DC6D45
md5: 1bed53cecdffd710430bbebd3d189ccd
sha1: 70d69760de907c07f8152cd649bbede287aee16c
sha256: 8a1b84606a80ada539b2ee3979d461e263efa02cdd3c63527e6175b7c6d89b62
sha512: 3e09921b6c9732264a8b83cff44709ea0e48284382b037bc9e16dc2cecf7f3c5986a0c61d03eca6b305caea4138de6aacdf186d043d71ab72f39a98feefba5b6
ssdeep: 12288:WIIMNid5wwChvwsOvwszIIMNid5wwC5XAm3ggRUeMq9TYXvd0:WX5dl86HX5dlHm3NCdCTYl0
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T198D4BF61B39088F5E86341358965C633DAB67C3216B0C65F33E4372A1F733916D39BAA
sha3_384: 774fc8ce2b6766650d53cb3f7aa14dd15f31ab84e86cbf3d7a21b4391db48fea10a2059ec5a9061722839b62bddf8beb
ep_bytes: e8cc640000e995feffff8bff558bec81
timestamp: 2019-06-09 15:36:31

Version Info:
0: [No Data]

Generik.JLUCFGZ also known as:

Lionic	Worm.Win32.AutoRun.o!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38250855
FireEye	Trojan.GenericKD.38250855
McAfee	RDN/Autorun.worm.gen
Cylance	Unsafe
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Worm:Win32/AutoRun.f444ca0c
K7GW	Riskware ( 00584baa1 )
Cyren	W32/Bulz.BV.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.JLUCFGZ
TrendMicro-HouseCall	TROJ_GEN.R002C0PLE21
Paloalto	generic.ml
ClamAV	Win.Worm.Vindor-9886047-0
Kaspersky	Worm.Win32.AutoRun.vx
BitDefender	Trojan.GenericKD.38250855
NANO-Antivirus	Trojan.Win32.AutoRun.iwqnep
Avast	Win32:Malware-gen
Tencent	Win32.Worm.Autorun.Eclh
Ad-Aware	Trojan.GenericKD.38250855
Sophos	Generic ML PUA (PUA)
DrWeb	Win32.HLLW.Autoruner.547
TrendMicro	TROJ_GEN.R002C0PLE21
McAfee-GW-Edition	BehavesLike.Win32.Generic.jh
Emsisoft	Trojan.GenericKD.38250855 (B)
Ikarus	Trojan.Dropper
GData	Trojan.GenericKD.38250855
Avira	TR/Dropper.Gen
MAX	malware (ai score=86)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
VBA32	Trojan.Sdum
ALYac	Trojan.GenericKD.38250855
Malwarebytes	Malware.AI.3696146603
Yandex	Worm.AutoRun!BbfwjOHyDSE
Fortinet	W32/Agent.30F6!tr
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen

How to remove Generik.JLUCFGZ?

Generik.JLUCFGZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X