About “Generik.KAFJTUB” infection

The Generik.KAFJTUB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.KAFJTUB virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Generik.KAFJTUB?


File Info:
crc32: 52CE1B23
md5: f1fee52330082d4c586baf76fda09f2c
name: F1FEE52330082D4C586BAF76FDA09F2C.mlw
sha1: 522c7964ed536ea78066c104388f02fd382c4e3f
sha256: d495baa332d6ac347088f345a0a288041d00881ba521b76ab764ed2da1a1e097
sha512: ad365e9711cac565a95c0b317ce76321774055a042f72c28f680452bf0adc22e62290d0b8d2642d18acb2842c8c02b5c8ad7c57b46071d8112823b6d1619735f
ssdeep: 1536:itLqJ3B+B0GQiTNfp7igOHUGuEIQDJcFf99K3r5eGfVlsg61lUdfJ/bOBA0YvvH:+2J3B+SkA3r5/z6lUHbOBA0Yvv2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: x642x627x631x626 x627x644x623x641x643x627x631
FileVersion: 1.00
CompanyName: x639x644x64a x627x644x633x639x64ax62f
ProductName: x642x627x631x626 x627x644x623x641x643x627x631
ProductVersion: 1.00
OriginalFilename: x642x627x631x626 x627x644x623x641x643x627x631.exe

Generik.KAFJTUB also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
ClamAV	Win.Ransomware.Johnnie-9855473-0
CAT-QuickHeal	Trojan.VBCryptVMF.S2956045
ALYac	Gen:Variant.Johnnie.63858
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Johnnie.63858
Cybereason	malicious.330082
Cyren	W32/Sality.E.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.KAFJTUB
APEX	Malicious
Cynet	Malicious (score: 100)
Alibaba	Trojan:Win32/Sality.50d092e7
NANO-Antivirus	Trojan.Win32.Taranis.ericvy
MicroWorld-eScan	Gen:Variant.Johnnie.63858
Tencent	Win32.Trojan.Pornoblocker.Eehi
Ad-Aware	Gen:Variant.Johnnie.63858
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaCO.34142.mm3@a83FvUki
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Swisyn.dz
FireEye	Generic.mg.f1fee52330082d4c
Emsisoft	Gen:Variant.Johnnie.63858 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/PornoBlocker.dle
eGambit	Generic.Malware
Microsoft	PWS:Win32/Zbot!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Ransom
GData	Gen:Variant.Johnnie.63858
McAfee	GenericRXFT-RA!F1FEE5233008
Malwarebytes	Ransom.FileCryptor
Panda	Trj/CI.A
Yandex	Trojan.GenAsa!qMYm8P+TzMY
Fortinet	W32/PornoBlocker.ATWV!tr
Paloalto	generic.ml

How to remove Generik.KAFJTUB?

Generik.KAFJTUB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X