Malware

Generik.DRNVAUJ (file analysis)

Malware Removal

The Generik.DRNVAUJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.DRNVAUJ virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.DRNVAUJ?


File Info:

crc32: 25967F9F
md5: d7e22317a5f7472c6b7fc588a870b3b6
name: D7E22317A5F7472C6B7FC588A870B3B6.mlw
sha1: 7f5190b1de54522cf871f7f302232e3c33b1ab1c
sha256: 03b209015fc672da7e08359236d6fd0197f53e4ef9ccfc690380cf422961106a
sha512: 0d6956558f723df132f8de670f0eff3e771b59a24567b976c2bc7e2bd62846d45777d7a1fc316be7afe97a65defb9d670c55b507449c90772142271242680882
ssdeep: 12288:ZqsCL6hD2x/HAWbR2zS4si0O1A83u2BSDoCqKcFy:ZU6uHAW92zt/0Wu2BSMCqD
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: xa9 1990-2018 Adobe. All rights reserved.
InternalName: Droplet Template
FileVersion: 20.1 (x001 x003)
CompanyName: Adobe Systems Incorporated
ProductName: Adobe Photoshop CC 2019
ProductVersion: 20.1
FileDescription: Adobe Photoshop Droplet
OriginalFilename: Droplet Template
Translation: 0x0409 0x04b0

Generik.DRNVAUJ also known as:

LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.1de545
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.DRNVAUJ
APEXMalicious
AvastMSIL:CHMiner-C [Miner]
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderThetaGen:NN.ZemsilF.34088.Gm0@aCecWjgi
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
FireEyeGeneric.mg.d7e22317a5f7472c
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
GridinsoftRisk.Win32.CoinMiner.ko!ni
ZoneAlarmUDS:DangerousObject.Multi.Generic
AhnLab-V3Malware/Win32.Generic.C4378604
McAfeeArtemis!D7E22317A5F7
MalwarebytesMachineLearning/Anomalous.95%
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat
AVGMSIL:CHMiner-C [Miner]
Paloaltogeneric.ml

How to remove Generik.DRNVAUJ?

Generik.DRNVAUJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment