Malware

What is “Generik.DLVRYKC”?

Malware Removal

The Generik.DLVRYKC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.DLVRYKC virus can do?

  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Portuguese (Brazilian)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

wpad.local-net

How to determine Generik.DLVRYKC?


File Info:

name: 269931C5C6DAB68B503B.mlw
path: /opt/CAPEv2/storage/binaries/7fb24e3a03a09b7f4f3cfb4edd4c6c06ba2793eaf3bb1ff0a8b761975dafef6e
crc32: 659FEDE1
md5: 269931c5c6dab68b503b2262329071ed
sha1: c4ea6bb8c6fdfb4f40277e6cd7cb0fed4747509d
sha256: 7fb24e3a03a09b7f4f3cfb4edd4c6c06ba2793eaf3bb1ff0a8b761975dafef6e
sha512: 8933143e17c7df8435d95e3fe20c2cfb014be8ec3721303f76043e1ae8f7ab385746af5aa9d93577be03edfcde89530ab51b8ec8db31f580e7c3813aec96126d
ssdeep: 6144:NR1cb8/erDa69XEhNIjPdPRXMz9r1MOiLz1Q6l9KHsNC36z1LRAR0DS:NLT/e3aKEhMP4MOiVT9KHsNC3i1LRn2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D554126F535D94ADD429167CFCC6225EAF29491BEDA48FC34272300F31AFC25E91292E
sha3_384: 4a1c83ee6db734dddfb31898bfc8c91671f0a9311957bd46afcc3271dc7e4db0c47d2e4c434de4eb9b68e36d5c0d719b
ep_bytes: 60e872050000eb3387db9000b04a0060
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Generik.DLVRYKC also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
McAfeeArtemis!269931C5C6DA
CylanceUnsafe
SangforTrojan.Win32.Bitrep.8
AlibabaTrojan:Win32/Banker.8b5dfcf9
SymantecTrojan.Gen
ESET-NOD32a variant of Generik.DLVRYKC
APEXMalicious
Paloaltogeneric.ml
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.11498677
SophosMal/Generic-S
VIPRETrojan.Win32.Generic.pak!cobra
McAfee-GW-EditionBehavesLike.Win32.Dropper.dc
SentinelOneStatic AI – Suspicious PE
AviraTR/Spy.Banker.Gen
ViRobotTrojan.Win32.Z.Banker.290304
MicrosoftTrojan:Win32/Occamy.C7F
BitDefenderThetaAI:Packer.BF5AE51F19
MalwarebytesMalware.Heuristic.1003
TrendMicro-HouseCallTROJ_GEN.R002H0CIG21
YandexTrojanSpy.Banker!VtJo5NFhIdA
IkarusTrojan.Spy.Banker
FortinetPossibleThreat
AVGWin32:Malware-gen
PandaTrj/GdSda.A
MaxSecureTrojan.Malware.300983.susgen

How to remove Generik.DLVRYKC?

Generik.DLVRYKC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment