Malware

What is “Generik.KXKFFMC”?

Malware Removal

The Generik.KXKFFMC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.KXKFFMC virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Expresses interest in specific running processes
  • Unconventionial language used in binary resources: Greek
  • The binary likely contains encrypted or compressed data.
  • Checks for the presence of known windows from debuggers and forensic tools
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • The following process appear to have been packed with Themida: 2FF990B7213B944C586A7AE2CE8DCBFC.mlw
  • Network activity detected but not expressed in API logs
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Anomalous binary characteristics

How to determine Generik.KXKFFMC?


File Info:

crc32: 801A3A2C
md5: 2ff990b7213b944c586a7ae2ce8dcbfc
name: 2FF990B7213B944C586A7AE2CE8DCBFC.mlw
sha1: 584ccb18231e32ee145880fa58a6f08a4cec7598
sha256: b5a5d8613b38ca8936bfd02e580cd615c55994a0ddfab8db4a64b21ffecb47af
sha512: 5995940d1ec022849c890263d156e3ca6433b8cc07816d17179a079fa71e922d44ee3253b96e1580fc2022f9d2442062d237146a50d9ed01103e923a4fe5657c
ssdeep: 49152:uuxWVwuz7fHw2Pv623Swo7TsSue5J2+9kGXHBhLgPxLKyewWOU3fI:jWeY1Hr3rSugJ2+eGXHCxWyewp+I
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generik.KXKFFMC also known as:

LionicTrojan.Win32.Malicious.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.928609
CylanceUnsafe
AlibabaTrojanSpy:Win32/Stealer.d22da3b2
Cybereasonmalicious.8231e3
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.KXKFFMC
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan-Spy.Win32.Stealer.abav
BitDefenderTrojan.GenericKD.37585783
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanTrojan.GenericKD.37585783
Ad-AwareTrojan.GenericKD.37585783
SophosMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Kudj.vc
FireEyeGeneric.mg.2ff990b7213b944c
EmsisoftTrojan.GenericKD.37585783 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
eGambitPE.Heur.InvalidSig
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GridinsoftTrojan.Heur!.012124B1
ArcabitTrojan.Razy.DE2B61
GDataMSIL.Trojan-Stealer.Redline.YM0WIX
AhnLab-V3Trojan/Win.Generic.R429793
McAfeeArtemis!2FF990B7213B
MAXmalware (ai score=81)
VBA32BScope.Trojan.Sabsik.FL
PandaTrj/CI.A
IkarusTrojan.SuspectCRC
FortinetW32/PossibleThreat
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Generik.KXKFFMC?

Generik.KXKFFMC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment