Categories: Malware

Should I remove “Win32/GenCBL.FI”?

The Win32/GenCBL.FI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenCBL.FI virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Exhibits possible ransomware file modification behavior
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/GenCBL.FI?


File Info:
crc32: BBE98149md5: 0c5dadf565b1b19b47cbe98266f91152name: upload_filesha1: 40c8a1193954077628c5f89ee5ce9687d9f6f6desha256: 959a3cd5e58c2bbbb4a5179e658f6193fd6cf8d5d5384b4e6dca12fa7cbc2c74sha512: a8ea1f3f43ecb51cdb9476376dd8ae14920239b08086ce74a147df9c6821e292202e5c94d7c8201268a1c4076f84719deb8546b639aeb3f693fd56e8b68c8a6bssdeep: 3072:C05l6jCzk0HdKCKshhMy9eH4EiuWFbcaoOOK9LV+EcNsBQ9qRUVbomnN/:DnCE98sDXeHfijLo9qLV+yYqGjnN/type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: DFDWiz.exeFileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)CompanyName: Microsoft CorporationProductName: Microsoftxae Windowsxae Operating SystemProductVersion: 6.1.7600.16385FileDescription: Windows Disk Diagnostic User ResolverOriginalFilename: DFDWiz.exeTranslation: 0x0409 0x04b0

Win32/GenCBL.FI also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34866901
FireEye	Generic.mg.0c5dadf565b1b19b
McAfee	GenericRXAA-AA!0C5DADF565B1
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.34866901
K7GW	Riskware ( 0040eff71 )
TrendMicro	TROJ_GEN.R057C0OJO20
BitDefenderTheta	Gen:NN.ZedlaF.34590.yO9@a4nifXpi
Symantec	Packed.Generic.459
Avast	Win32:DangerousSig [Trj]
Kaspersky	Trojan-Banker.Win32.RTM.dio
Alibaba	TrojanBanker:Win32/GenCBL.ccb75d86
Tencent	Win32.Trojan.Falsesign.Glx
Ad-Aware	Trojan.GenericKD.34866901
Sophos	Mal/EncPk-APV
Comodo	Malware@#1rnjr7o1p6lda
F-Secure	Trojan.TR/Spy.Banker.hrjpp
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-R + Mal/EncPk-APV
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.34866901 (B)
Avira	TR/Spy.Banker.hrjpp
MAX	malware (ai score=84)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Generic.D21406D5
ZoneAlarm	Trojan-Banker.Win32.RTM.dio
GData	Trojan.GenericKD.34866901
Cynet	Malicious (score: 100)
ALYac	Trojan.Agent.ZLoader
VBA32	Malware-Cryptor.Kirgudu
Malwarebytes	Trojan.MalPack.DGI.Generic
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/GenCBL.FI
TrendMicro-HouseCall	TROJ_GEN.R057C0OJO20
Yandex	Trojan.PWS.RTM!LiIfc9AJbO8
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/GenCBL.FC!tr
AVG	Win32:DangerousSig [Trj]
Paloalto	generic.ml