Malware

Generik.DTZLQYK removal instruction

Malware Removal

The Generik.DTZLQYK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.DTZLQYK virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality

How to determine Generik.DTZLQYK?


File Info:

name: E2A28C6ACF4737DC119E.mlw
path: /opt/CAPEv2/storage/binaries/4801fc73eec08d0537931dd92777072519030a68ba90c902d0a413bf324343b6
crc32: 0FC115E3
md5: e2a28c6acf4737dc119e7c6b6fcdfd4b
sha1: 2ae65c3992abdfb5119042fb5a0477cda84a3622
sha256: 4801fc73eec08d0537931dd92777072519030a68ba90c902d0a413bf324343b6
sha512: cf656514a464a4a92f76b598fce71024fe5b77332526fd2c2c5a0a1b688a998577a5a40accd6b17eb97622e30629785eff22fbe47e24c0a2e0f7851fb1e0c1a5
ssdeep: 12288:8zxzTDWikLSb4NS7ET+tG1XDDRdknWNH2H:6DWHSb4NhpkZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FCB4E002FD8194B2D5211C325969AB61253DBE201F258FEBE3D46E2DE9341D0FB31BA7
sha3_384: bdf9ddeee0aa414d32b624cd9d14e35ff97ee397623b7d3f9d92f0c674015c38ae2a8684f34ee6c15d36f4407cc77364
ep_bytes: e864040000e988feffff3b0d68e64300
timestamp: 2021-06-11 09:16:47

Version Info:

0: [No Data]

Generik.DTZLQYK also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.NanoBot.trQD
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader23.51930
MicroWorld-eScanIL:Trojan.MSILZilla.8845
McAfeeArtemis!E2A28C6ACF47
CylanceUnsafe
SangforTrojan.Win32.Sabsik.FL
K7AntiVirusTrojan ( 0058dab61 )
K7GWTrojan ( 0058dab61 )
Cybereasonmalicious.acf473
SymantecBackdoor.Ratenjay
ESET-NOD32a variant of Generik.DTZLQYK
AvastWin32:Malware-gen
KasperskyBackdoor.MSIL.Bladabindi.bsnw
BitDefenderIL:Trojan.MSILZilla.8845
SophosMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
FireEyeGeneric.mg.e2a28c6acf4737dc
EmsisoftIL:Trojan.MSILZilla.8845 (B)
Paloaltogeneric.ml
MicrosoftTrojan:Script/Phonzy.C!ml
GDataIL:Trojan.MSILZilla.8845
CynetMalicious (score: 100)
ALYacIL:Trojan.MSILZilla.8845
MAXmalware (ai score=82)
MalwarebytesMalware.AI.3676363810
APEXMalicious
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Generik.DTZLQYK?

Generik.DTZLQYK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment