Malware

About “Win32/GenCBL.BXS” infection

Malware Removal

The Win32/GenCBL.BXS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenCBL.BXS virus can do?

  • At least one process apparently crashed during execution
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Win32/GenCBL.BXS?


File Info:

name: 943009825E1E4DFD0D31.mlw
path: /opt/CAPEv2/storage/binaries/dd7231423c5760cc5ca2f33a281e8e4d7e9cd936f6a32f8d76055b71f7a9179a
crc32: 28BDCDB5
md5: 943009825e1e4dfd0d31602c29c82532
sha1: 7569c7206e658b7d96e78e96573a706fa18fdc4a
sha256: dd7231423c5760cc5ca2f33a281e8e4d7e9cd936f6a32f8d76055b71f7a9179a
sha512: 59c9841c8f9a5004bcdd8887c16896305c79092132946019b2a1eaffd21b652ce73916ba6ae268a0279750822c036441d05027a37b5e2686d47c64b2eba5e4f4
ssdeep: 49152:cvoSJAvJQ2JNzCKbMKKrJperBpugonirLxvRLtjWjwf2oALt2K+OZL5GQz994Yal:KKKKdoitO1J/t0N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11295BF03BAD08072E5BA17381A79F731867EFD700F6185DB629065DE1D71AC09D3A36B
sha3_384: 05f935aeb53f89997b4350dd2cc2970005a978cf634f937bd91f38315db2fedcec1f32aa0ffdf0bb640db488b057ecca
ep_bytes: e81e000000b800004000050010000050
timestamp: 1981-11-18 01:17:11

Version Info:

Comments: www.sopcast.com
CompanyName: www.sopcast.com
FileDescription: SopCast Main Application
FileVersion: 4.2.0.800
InternalName: SopCast.exe
LegalCopyright: Copyright (C) 2004 - 2013, SopCast.com. All rights reserved.
OriginalFilename: SopCast.exe
ProductName: SopCast
ProductVersion: 4.2.0.800
Translation: 0x0409 0x04e4

Win32/GenCBL.BXS also known as:

BkavW32.AIDetect.malware2
MicroWorld-eScanTrojan.GenericKDZ.87225
FireEyeGeneric.mg.943009825e1e4dfd
CAT-QuickHealTrojan.Mauvaise.SL1
McAfeeGenericRXSU-NF!943009825E1E
CylanceUnsafe
K7AntiVirusTrojan ( 00591d561 )
K7GWTrojan ( 00591d561 )
Cybereasonmalicious.25e1e4
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/GenCBL.BXS
APEXMalicious
ClamAVWin.Ransomware.Gandcrab-9948809-0
BitDefenderTrojan.GenericKDZ.87225
AvastWin32:DangerousSig [Trj]
RisingRansom.Gandcrab!8.F355 (TFE:dGZlOgXaPy5ffAHnmA)
Ad-AwareTrojan.GenericKDZ.87225
EmsisoftTrojan.GenericKDZ.87225 (B)
DrWebTrojan.Packed2.44212
VIPRETrojan.GenericKDZ.87225
McAfee-GW-EditionGenericRXSU-NF!943009825E1E
Trapminemalicious.moderate.ml.score
SophosML/PE-A
IkarusTrojan.Crypter
GDataTrojan.GenericKDZ.87225
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=86)
Antiy-AVLTrojan/Generic.ASMalwS.A3
ArcabitTrojan.Generic.D154B9
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Gandcrab.R457503
ALYacTrojan.GenericKDZ.87225
MalwarebytesMalware.AI.1634969234
TencentMalware.Win32.Gencirc.10d035b5
YandexTrojan.GenAsa!EooOfm73eOg
BitDefenderThetaGen:NN.ZexaF.34786.1L3@amC6OKdi
AVGWin32:DangerousSig [Trj]

How to remove Win32/GenCBL.BXS?

Win32/GenCBL.BXS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment