Malware

Should I remove “Generik.XKHKLL”?

Malware Removal

The Generik.XKHKLL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.XKHKLL virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Generik.XKHKLL?


File Info:

crc32: 92004CDE
md5: 8b9f4a5e1edf2a2e90fdf5efc9690af9
name: 8B9F4A5E1EDF2A2E90FDF5EFC9690AF9.mlw
sha1: 3175a16552afffc5ebdc3da08a0d1cbf5853b934
sha256: 112562bf2b33c05983e5ef9b17e9546c12c2c6c31e638903ee014904be76c2d4
sha512: 5ae53f694ea571e929ffd0ebcf759c5d889b90844ad53a3f7dc24c5e3488aaa61c1d61f6083c82dff0f307630c81b1ea4fd802377be0308c1c3695f3305778a1
ssdeep: 768:WOa6Z/EMxhqQOrMqM9r60YINcio0GNiwpAAWXkmLh4vrz5g7p5Jzo09JeX:la6ZlTqQGiHYEqiAtmLssp5JzB9J
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: Nan xa9 Corp.
InternalName: EGANS
FileVersion: 1.00
LegalTrademarks: Nan xa9 Corp.
ProductName: hjemmedatamatens
ProductVersion: 1.00
OriginalFilename: EGANS.exe

Generik.XKHKLL also known as:

BkavW32.AIDetectGBM.malware.02
Elasticmalicious (high confidence)
FireEyeGeneric.mg.8b9f4a5e1edf2a2e
McAfeeArtemis!8B9F4A5E1EDF
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMetagen [Malware]
CynetMalicious (score: 90)
KasperskyUDS:DangerousObject.Multi.Generic
AegisLabTrojan.Multi.Generic.4!c
McAfee-GW-EditionBehavesLike.Win32.Trojan.lm
IkarusWin32.SuspectCrc
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmTrojan.Win32.Vebzenpak.adxz
ESET-NOD32a variant of Generik.XKHKLL
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Vebzenpak.HgIASPoA

How to remove Generik.XKHKLL?

Generik.XKHKLL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment