Malware

About “Generik.HHDIKMH” infection

Malware Removal

The Generik.HHDIKMH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.HHDIKMH virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
nNpwxhwvUw.nNpwxhwvUw

How to determine Generik.HHDIKMH?


File Info:

crc32: E8852D57
md5: 21251e40d18b7366c30efacb9f2f45a3
name: 21251E40D18B7366C30EFACB9F2F45A3.mlw
sha1: 2d97856af7bcf4e0341fd3c7dafd2d8e1b6d88f9
sha256: b9f2ce1d3e9f6eb983a8620c4ba52401ef0a74b4ff856e27386840626c30f637
sha512: c66fd1adb0b21419458ac9ef341d6d698f73e9fdc27fef5ff4eaf12bd769a8da3cf4f6152353acf83fe38287225f527a8d9b1267455f15b83690a65d4c8c755c
ssdeep: 24576:Nd1ZroX5NY50ZGu7Iaj1wCAWzlFXDyO83H+ovi1/GpwvPEzUX3F:31ZqG5kLxDA4FXO3BvJlUX3F
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: blunge
ProductVersion: 1.0.0.0
FileVersion: 1.0.0.0
FileDescription:
Translation: 0x0000 0x04b0

Generik.HHDIKMH also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ZillyaTrojan.Coins.Win32.6659
SangforTrojan.Win32.Save.a
CyrenW32/Kryptik.EWJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.HHDIKMH
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Packed.Filerepmalware-9864117-0
KasperskyBackdoor.Win32.Agent.myudbw
BitDefenderThetaGen:NN.ZexaF.34088.mq0@aChfQqki
McAfee-GW-EditionBehavesLike.Win32.SearchSuite.tc
EmsisoftTrojan.Crypt (A)
AviraHEUR/AGEN.1140896
eGambitUnsafe.AI_Score_100%
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Trojan.BSE.HLJWVB
VBA32BScope.Trojan.Glupteba
MalwarebytesMalware.AI.1294164741
IkarusMalware.Win32.AVEvader
AVGWin32:Malware-gen
Qihoo-360HEUR/QVM42.0.5A3F.Malware.Gen

How to remove Generik.HHDIKMH?

Generik.HHDIKMH removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment