Categories: Malware

Generik.GDXOZOU removal

The Generik.GDXOZOU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.GDXOZOU virus can do?

Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
Drops a binary and executes it
Authenticode signature is invalid
A scripting utility was executed
Appears to use command line obfuscation
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

How to determine Generik.GDXOZOU?


File Info:
name: E2CCD8B6DF2CD28D88CE.mlwpath: /opt/CAPEv2/storage/binaries/d856a31a0cfe6b889321e0eede42589489d18d4919f1bd51e9d2cefd7cb837c4crc32: CF6292E6md5: e2ccd8b6df2cd28d88ce14207b70d272sha1: cff6c169eaf07869c510ffab5e48eee2e639a766sha256: d856a31a0cfe6b889321e0eede42589489d18d4919f1bd51e9d2cefd7cb837c4sha512: ccbf031ac78a0d2d21d011085c7e4ff6ede8b858244492e892c160382f72b6d43d652b476b507c3c8c97fa498a2ee7a0abedac5d5d773eb3e4362f95ac9decadssdeep: 24576:o20gPgFKW7H5ly+p15WFIQKxEw74IPHoZXC7f/19S:5KZH5lyCPWFIQKxEw7toZCdUtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17D3512B235E5D032D563143089F9DB22F9B6B9741B31A68FBF900F2D6F31AE29211752sha3_384: 2a09b96b605a2fcd48987190cddcc153677bf953146b29534180c201faec89e0197ad6a2db17606a64ff275184757cbeep_bytes: e885630000e978feffff8bff558bec56timestamp: 2014-12-02 10:07:30
Version Info:
0: [No Data]

Generik.GDXOZOU also known as:

Bkav	W32.Common.01E25B17
Lionic	Trojan.Win32.Uztuby.4!c
AVG	Win32:Malware-gen
MicroWorld-eScan	Trojan.Uztuby.2
FireEye	Trojan.Uztuby.2
Skyhigh	BehavesLike.Win32.Dropper.tc
ALYac	Trojan.Uztuby.2
Cylance	unsafe
Sangfor	Trojan.Win32.Inject.Vcr3
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Inject.774fa87a
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.6df2cd
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.GDXOZOU
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Inject.anpqw
BitDefender	Trojan.Uztuby.2
Tencent	Win32.Trojan.Inject.Yimw
Emsisoft	Trojan.Uztuby.2 (B)
DrWeb	Trojan.MulDrop16.42883
VIPRE	Trojan.Uztuby.2
Sophos	Mal/Generic-S
Webroot	W32.Trojan.Gen
Kingsoft	malware.kb.a.887
Microsoft	Trojan:Win32/CryptInject!MSR
ZoneAlarm	Trojan.Win32.Inject.anpqw
GData	Trojan.Uztuby.2
McAfee	Artemis!E2CCD8B6DF2C
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CBL24
Rising	Malware.AbnormalScript/SFX!1.D9B9 (CLASSIC)
Ikarus	Trojan.VBS.Agent
MaxSecure	Trojan.Malware.1728101.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)