Malware

Generik.HPDQLXZ removal guide

Malware Removal

The Generik.HPDQLXZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.HPDQLXZ virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Generik.HPDQLXZ?


File Info:

crc32: 3902BE49
md5: 2fddaab3b31aa03d25ee472a4bef9152
name: 2FDDAAB3B31AA03D25EE472A4BEF9152.mlw
sha1: 60d6540530df3330e61ca359ce945a6e3d6fbf03
sha256: 44163384a787d9f25f4c2616dfec47d802e129b3d99464d23288667188d2ac49
sha512: 669f5390e518d8c04a8a005a617689cedf5b1440dbb01a80151cf85eef86f04bd0d2cd82a7bd65d6f56d483b51a8833b55fd9d574cea8da24b4d8f912b6fd456
ssdeep: 12288:OYPW5o0zSsGuMrgqulU405824SW1t8LF:OM4o7SYoykSI8
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: FRHI Hotels & Resorts in 2016
Assembly Version: 37.0.0.0
InternalName: x6ccx62c.exe
FileVersion: 17.0.0.0
CompanyName: Swissotel Management (USA) L.L.C.
LegalTrademarks:
Comments:
ProductName: Swissxf4tel
ProductVersion: 17.0.0.0
FileDescription: Swissxf4tel
OriginalFilename: x6ccx62c.exe

Generik.HPDQLXZ also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.35231421
McAfeePWS-FCSU!2FDDAAB3B31A
CylanceUnsafe
SangforMalware
BitDefenderTrojan.GenericKD.35231421
ArcabitTrojan.Generic.D21996BD
TrendMicroPossible_SMREMCOS
CyrenW32/Trojan.PMCO-5209
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.MSIL.Stelega.gen
AlibabaTrojan:Win32/starter.ali1000139
ViRobotTrojan.Win32.Z.Stelega.479232
TencentMsil.Trojan-qqpass.Qqrob.Hwnl
Ad-AwareTrojan.GenericKD.35231421
EmsisoftTrojan.GenericKD.35231421 (B)
F-SecureTrojan.TR/AD.Nanocore.twnbu
DrWebTrojan.InjectNET.14
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Fareit.gc
FireEyeGeneric.mg.2fddaab3b31aa03d
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
AviraTR/AD.Nanocore.twnbu
MicrosoftBackdoor:MSIL/Noancooe.A
AhnLab-V3Malware/Win32.RL_Possible_smremcos.C4226161
ZoneAlarmHEUR:Trojan-PSW.MSIL.Stelega.gen
GDataTrojan.GenericKD.35231421
CynetMalicious (score: 100)
ESET-NOD32a variant of Generik.HPDQLXZ
ALYacTrojan.GenericKD.35231421
MalwarebytesTrojan.MalPack.PNG.Generic
PandaTrj/GdSda.A
TrendMicro-HouseCallPossible_SMREMCOS
IkarusTrojan.MSIL.Krypt
eGambitUnsafe.AI_Score_96%
FortinetMSIL/GenKryptik.EWCI!tr
WebrootW32.Trojan.Gen
AVGWin32:MalwareX-gen [Trj]
Cybereasonmalicious.530df3
AvastWin32:MalwareX-gen [Trj]
Qihoo-360Generic/HEUR/QVM03.0.4777.Malware.Gen

How to remove Generik.HPDQLXZ?

Generik.HPDQLXZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment