Malware

Generik.HWIYIOP information

Malware Removal

The Generik.HWIYIOP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.HWIYIOP virus can do?

  • Creates RWX memory
  • Loads a driver
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Tries to suspend Cuckoo threads to prevent logging of malicious activity
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
www.hidetoolz.com
a.tomx.xyz

How to determine Generik.HWIYIOP?


File Info:

crc32: AD7F3F24
md5: 2260ab96a3dde344adc01fa0ae1727e6
name: HideToolz.exe
sha1: 33beea0096ace4ea6753cca1be22dbd5663a4ca1
sha256: 476efbf4fd7c56460c5b16074ba0a10abac1ec8d52f620ab2d2100c55d13cffb
sha512: 2c67f54d16e24f8d7c720278e2c0e1857d3d8af1cb23f90df44c72d3dd34307a129a56c1ddbb8d4cac399c5d184f0f8eb91f4e126706588ef6d9e07ec2849c6f
ssdeep: 49152:QQc0ikkUqmbWnqZfUVJSwryJOutb8CEM9NZ58x/3Zw90VpJ0uuwS8:Qj0ikFqmbKSpLb8CEqZidJw90Vp1u1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: HideToolz Copyright (C) 2017
InternalName: HideTool.exe
FileVersion: 3.0.0.0
CompanyName: HideToolz
ProductName: HideToolz
ProductVersion: 3.0.0.0
FileDescription: HideToolz
OriginalFilename: HideTool.exe
Translation: 0x0c00 0x04b0

Generik.HWIYIOP also known as:

BkavHW32.Packed.
MicroWorld-eScanTrojan.GenericKD.6050525
FireEyeGeneric.mg.2260ab96a3dde344
McAfeeArtemis!2260AB96A3DD
AegisLabTrojan.Win32.Generic.4!c
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderTrojan.GenericKD.6050525
K7GWTrojan ( 0052ec501 )
K7AntiVirusTrojan ( 0052ec501 )
ESET-NOD32a variant of Generik.HWIYIOP
APEXMalicious
AvastWin32:Malware-gen
GDataTrojan.GenericKD.6050525
KasperskyUDS:DangerousObject.Multi.Generic
AlibabaTrojan:Win32/Muldrop.7ee77b37
NANO-AntivirusTrojan.Win32.GenericKD.etetpe
TencentWin32.Trojan.Generic.Hoya
Ad-AwareTrojan.GenericKD.6050525
EmsisoftTrojan.GenericKD.6050525 (B)
F-SecureTrojan.TR/Muldrop.otijx
DrWebTrojan.Rootkit.22036
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Injector.vc
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
IkarusTrojan.SuspectCRC
CyrenW32/Trojan.EPRM-8644
WebrootW32.Trojan.GenKD
AviraTR/Muldrop.otijx
Antiy-AVLTrojan/Win32.TSGeneric
ArcabitTrojan.Generic.D5C52DD
MicrosoftTrojan:Win32/Tiggre!rfn
ALYacTrojan.GenericKD.6050525
MAXmalware (ai score=75)
VBA32TScope.Malware-Cryptor.SB
RisingMalware.Heuristic.MLite(84%) (AI-LITE:3jyNLVNeP/YHbRyUGh0dcQ)
SentinelOneDFI – Suspicious PE
FortinetGenerik.HWIYIOP!tr
AVGWin32:Malware-gen
Cybereasonmalicious.6a3dde
Paloaltogeneric.ml

How to remove Generik.HWIYIOP?

Generik.HWIYIOP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment