What is “Generik.DTROYSI”?

The Generik.DTROYSI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.DTROYSI virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Generik.DTROYSI?


File Info:
name: C3241A5CCA88D29E2BC8.mlw
path: /opt/CAPEv2/storage/binaries/35b27618299345ae63625435565cee503d22b0faa48572e5ba717167cc36289f
crc32: D4DCE0C0
md5: c3241a5cca88d29e2bc8d7d5c20726f9
sha1: a2dc778ec090c85490b1509465288358771f29b8
sha256: 35b27618299345ae63625435565cee503d22b0faa48572e5ba717167cc36289f
sha512: 12c7e30ef0f0be211bc908ca978fed40e1d72734b3f20a89f2228b4c61fffce43cc1fdde4981d9c0d353a4396fb7b2cac427e90608b96fc6b0d8ce1b38c5ce49
ssdeep: 48:6Pm+gEQ+wbg+Z0ZstMeKLz8g4VNMYUOYoYAEK60dt7b3kJZsFtntlNCZFipfbNtm:HOwbj0si3fh4HYozDFn5f7zNt
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E6C1C611C7D44776FE7B0B72ACB3830043B0FA519D639BAE19D9A29B3D262144963B71
sha3_384: 68d76371cc281b910f303afade166554ee23de2bb9c38e864e1ffaffdf8956445161b072c6c439070aad77ced7149486
ep_bytes: ff2500204000b857000780c218000000
timestamp: 2082-08-02 19:00:53

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: test-bins
FileVersion: 1.0.0.0
InternalName: test.exe
LegalCopyright: Copyright ©  2019
LegalTrademarks: 
OriginalFilename: test.exe
ProductName: test-bins
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Generik.DTROYSI also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
Skyhigh	Artemis!Trojan
Cylance	unsafe
Zillya	Trojan.Generic.Win32.1403541
Sangfor	Trojan.Win32.Generic.ky
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/AmsiTamper.84acf1cf
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilCO.36744.am0@aSkJDQc
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.DTROYSI
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.AmsiTamper.jpjecc
Avast	Win32:MalwareX-gen [Trj]
Tencent	Win32.Trojan.Generic.Ddhl
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.gwvhy
Webroot	W32.Trojan.Gen
Antiy-AVL	Trojan/Win32.AmsiTamper
Microsoft	Trojan:Win32/AmsiTamper.B
ZoneAlarm	HEUR:Trojan.Win32.Generic
AhnLab-V3	Trojan/Win32.RL_AgentTesla.C4181110
McAfee	Artemis!C3241A5CCA88
Panda	Trj/CI.A
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Trojan.Agent!5X10FcvJL/8
Ikarus	Trojan.AmsiTamper
Fortinet	MSIL/Kryptik.YPH!tr
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Generik.DTROYSI?

Generik.DTROYSI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X