Malware

Generik.DJNLAWA removal instruction

Malware Removal

The Generik.DJNLAWA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.DJNLAWA virus can do?

  • Executable code extraction
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
gx.iis7.com
a.tomx.xyz

How to determine Generik.DJNLAWA?


File Info:

crc32: 694727E3
md5: 3d94f8c52f424ebcbc96bbf180c4254b
name: iis7-fuwuduan-update.exe
sha1: b19f08d662d21a1e68d4f24f280f68f67730c230
sha256: 691378a8e43bbe37218342b382338e70ef7f33cb2e96518b4ebdada8a1fdbd70
sha512: 01e25c6f2ce884b0d69cc830ca2a0949b8411145b9a473f24752b04ae6d15a39455583c65889f594a6decfac367993065d93192e54f63f6ac52a7205107c100b
ssdeep: 3072:3dSK04ETBpp5NXyh4TBfRvjLTI5fxREoC4SAdmkkW/stROvoBxvvUEQwoF:3dSK04ETTZ+4TBpvjLCAT4ndmkoTvET
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2019
Assembly Version: 1.0.0.0
InternalName: update.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: update
ProductVersion: 1.0.0.0
FileDescription: update
OriginalFilename: update.exe

Generik.DJNLAWA also known as:

MicroWorld-eScanTrojan.GenericKD.32494628
FireEyeGeneric.mg.3d94f8c52f424ebc
Qihoo-360Win32/Trojan.Dropper.fae
ALYacTrojan.GenericKD.32494628
CylanceUnsafe
ZillyaTrojan.Generic.Win32.954214
K7AntiVirusTrojan ( 0056082a1 )
BitDefenderTrojan.GenericKD.32494628
K7GWTrojan ( 0056082a1 )
Cybereasonmalicious.662d21
BitDefenderThetaGen:NN.ZexaF.34122.mq0@aO8Je@e
F-ProtW32/Trojan.DAN.gen!Eldorado
SymantecML.Attribute.HighConfidence
AvastWin32:Malware-gen
GDataTrojan.GenericKD.32494628
KasperskyHEUR:Trojan-Ransom.Win32.Blocker.vho
AlibabaTrojan:Win32/Generic.43bb2405
NANO-AntivirusTrojan.Win32.Mlw.gbbhov
AegisLabTrojan.Win32.Generic.mk9P
APEXMalicious
TencentWin32.Trojan.Blocker.Lneq
Ad-AwareTrojan.GenericKD.32494628
SophosMal/Generic-S
ComodoMalware@#hh4zw5v2kko5
F-SecureTrojan.TR/Dropper.Gen7
VIPRETrojan.Win32.Generic!BT
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
Trapminesuspicious.low.ml.score
EmsisoftTrojan.GenericKD.32494628 (B)
SentinelOneDFI – Malicious PE
CyrenW32/Trojan.DAN.gen!Eldorado
AviraTR/Dropper.Gen7
MAXmalware (ai score=83)
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1EFD424
ZoneAlarmHEUR:Trojan-Ransom.Win32.Blocker.vho
MicrosoftTrojan:Win32/Occamy.C
AhnLab-V3Trojan/Win32.Tiggre.C3989064
Acronissuspicious
McAfeeRDN/Generic Dropper
VBA32Trojan.Tiggre
PandaTrj/CI.A
ESET-NOD32a variant of Generik.DJNLAWA
RisingDropper.Generic!8.35E (CLOUD)
YandexTrojan.Agent!Jixi/24yPZw
IkarusTrojan.Dropper
eGambitUnsafe.AI_Score_99%
FortinetW32/Generic!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.7164915.susgen

How to remove Generik.DJNLAWA?

Generik.DJNLAWA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment