Generik.EWHGIMN removal

The Generik.EWHGIMN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.EWHGIMN virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
Performs some HTTP requests
The binary likely contains encrypted or compressed data.

Related domains:

z.whorecord.xyz

a.tomx.xyz

ip.anysrc.net

158.102.105.176.zen.spamhaus.org

158.102.105.176.cbl.abuseat.org

How to determine Generik.EWHGIMN?


File Info:
crc32: 23416FB5
md5: 2e57586de04bc7b4e881f29a7e5ec622
name: 2E57586DE04BC7B4E881F29A7E5EC622.mlw
sha1: 7cde157dd1aba77aef99c7dfc9ac53cac7fe8e18
sha256: 1ef60fd1d086a38a461af8a8f2e2ed485c0c1230e12a6c6378d54d1035ca8afa
sha512: 293b9f9abde68b019bac5e8f095d16a0d72e947008e84a9d791d38b9cd1ba1f26c40daade60a721219feefdb88e97292ed7ed5cc3cdb741bb4b53207a1a62fea
ssdeep: 12288:NCVB2/feE++T9u39PgcnWwqLgY279f0/H8kJsw:Nb/fR++T9A1qLgY27O0Ysw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2005
InternalName: I want to take that same fight, that same spirit
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: the smartest people out there
ProductVersion: 1, 0, 0, 1
FileDescription: Jenner told Hannity on Wednesday that
OriginalFilename: I want to take that same fight, that same spirit
Translation: 0x0409 0x04b0

Generik.EWHGIMN also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Agent.CVI.gen!Eldorado
ESET-NOD32	a variant of Generik.EWHGIMN
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Trickpak.gen
MicroWorld-eScan	Trojan.GenericKDZ.75003
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.Zextet.34688.Qy0@aSH5d1hi
FireEye	Generic.mg.2e57586de04bc7b4
GData	Win32.Trojan-Spy.TrickBot.GM4A0C
McAfee	Artemis!2E57586DE04B
Rising	Malware.Undefined!8.C (C64:YzY0OmkuZBDQpC2k)
Fortinet	W32/PossibleThreat
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Generik.EWHGIMN?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.