Malware

Generik.DUCYLZF removal tips

Malware Removal

The Generik.DUCYLZF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.DUCYLZF virus can do?

  • Executable code extraction
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Generik.DUCYLZF?


File Info:

crc32: F8458CFE
md5: 98ba9a7c401c7eaecfe7862ca09654eb
name: 98BA9A7C401C7EAECFE7862CA09654EB.mlw
sha1: 8ea9e46389cf7a2aae0cfb675e55055fd788bf34
sha256: 1e59533fcf4076af5817d533d54c92d83fa4f8ad3adc12012ea115e621cd816e
sha512: 2d320e09df258a9393f4e03f5a9e7c1bd5263defffacd315f8812ceb8cec37990a297d1ee707c46ed8636ab95104699e81cfadf22a9a2d516c9a002fea275d65
ssdeep: 384:jP2L3IrrS+tSeaHKkHYNfmkLBpJ5ITv11XmClSgdvCal1Bb913n/ykDWSjR9CIr:jPA3QG+QHKE0fhuTv1FSCNBbLq+RfCQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0804 0x04b0
LegalCopyright: 2009-2011
InternalName: drvpath
FileVersion: 1.00
CompanyName: Laye.E.Carter
ProductName: Drvpath
ProductVersion: 1.00
FileDescription: Drvpath
OriginalFilename: drvpath.exe

Generik.DUCYLZF also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacGen:Trojan.Heur.VP2.em0@a8d6BTnb
CylanceUnsafe
AlibabaTrojan:Win32/Generic.ae92fc1b
Cybereasonmalicious.c401c7
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.DUCYLZF
APEXMalicious
AvastWin32:Malware-gen
BitDefenderGen:Trojan.Heur.VP2.em0@a8d6BTnb
NANO-AntivirusTrojan.Win32.Agent.ejrgoa
MicroWorld-eScanGen:Trojan.Heur.VP2.em0@a8d6BTnb
TencentWin32.Trojan.Patched.Hvta
Ad-AwareGen:Trojan.Heur.VP2.em0@a8d6BTnb
SophosMal/Generic-S
ComodoTrojWare.Win32.Paskod.AR@5t8nic
BitDefenderThetaAI:Packer.89DBBD3C20
McAfee-GW-EditionBehavesLike.Win32.BadFile.kz
FireEyeGeneric.mg.98ba9a7c401c7eae
EmsisoftGen:Trojan.Heur.VP2.em0@a8d6BTnb (B)
AviraTR/Patched.Ren.Gen
MicrosoftTrojan:Win32/Occamy.C1E
ArcabitTrojan.Heur.VP2.E6E4B9
GDataGen:Trojan.Heur.VP2.em0@a8d6BTnb
McAfeeArtemis!98BA9A7C401C
MAXmalware (ai score=97)
SentinelOneStatic AI – Malicious PE
AVGWin32:Malware-gen

How to remove Generik.DUCYLZF?

Generik.DUCYLZF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment