Should I remove "Generik.EYMOQNS"?

The Generik.EYMOQNS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.EYMOQNS virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
The binary likely contains encrypted or compressed data.
Checks for the presence of known windows from debuggers and forensic tools
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs
Checks the version of Bios, possibly for anti-virtualization
Detects VirtualBox through the presence of a registry key
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generik.EYMOQNS?


File Info:
crc32: B40DDD99
md5: 08b62c5bcbf205a2784ee149188e4f4b
name: 08B62C5BCBF205A2784EE149188E4F4B.mlw
sha1: 8f96e2c4fdd3bfaf2df68db9d180a3be6057351f
sha256: f378284aaae09e60e0d172bf1af0569759e8b8320a75fd7def22bf0a4173a406
sha512: 60eb07fd7928d746e3fdc8af4071caebfa369311edaa63a1afd44e63aa24c99e8f6f6949d03480db0df40200a25268d1d77c9e11a6145826c1f507ecae67a8d0
ssdeep: 98304:ADuGvb90UXXdMC1Jvv5F0496IY3UALBpX:AB50eXyCBFF6Iq3LDX
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2017 Realtek Semiconductor Corp.
InternalName: RtlUpd
FileVersion: 3, 2, 0, 0
CompanyName: Realtek Semiconductor Corp.
Comments: Developed  by Archeng
ProductName: Realtek HD Auido Update and remove driver Tool
ProductVersion: 3, 2, 0, 0
FileDescription: Driver Setup API for Realtek HD Audio
OriginalFilename: RtlUpd.EXE
Translation: 0x0409 0x04b0

Generik.EYMOQNS also known as:

Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Siggen3.2317
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.910166
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Application/Redcap.80dd1759
Cybereason	malicious.4fdd3b
Cyren	W32/Reline.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.EYMOQNS
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-PSW.MSIL.Reline.gbb
BitDefender	Gen:Variant.Razy.910166
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
MicroWorld-eScan	Gen:Variant.Razy.910166
Ad-Aware	Gen:Variant.Razy.910166
Sophos	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.08b62c5bcbf205a2
Emsisoft	Gen:Variant.Razy.910166 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
Avira	TR/Redcap.aeyit
eGambit	PE.Heur.InvalidSig
Kingsoft	Win32.Heur.KVMH008.a.(kcloud)
Microsoft	Trojan:Win32/Sabsik.FL.A!ml
Gridinsoft	Trojan.Heur!.012126B1
GData	MSIL.Trojan-Stealer.NetSteal.OQ1YMT
AhnLab-V3	Trojan/Win.Generic.R429793
McAfee	Artemis!08B62C5BCBF2
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Tiggre
Malwarebytes	Spyware.RedLineStealer
TrendMicro-HouseCall	TROJ_GEN.R002H09HK21
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Generik.EYMOQNS?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Generik.EYMOQNS”?