Categories: Malware

Generik.IKLVWHW (file analysis)

The Generik.IKLVWHW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.IKLVWHW virus can do?

Behavioural detection: Executable code extraction – unpacking
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Generik.IKLVWHW?


File Info:
name: E96787B713077FD4F4FF.mlwpath: /opt/CAPEv2/storage/binaries/c238f23084a286ddd38e07c14ec65fb97b15627a77c93dfbb6faa2cea58c83bfcrc32: 94D46248md5: e96787b713077fd4f4fffd0454fe830csha1: 239c2141f8e4d2024920da4799eb8414fc1f80f1sha256: c238f23084a286ddd38e07c14ec65fb97b15627a77c93dfbb6faa2cea58c83bfsha512: c5ca8ea9cbcc49335796af0ac8a6ce22c979e0296312f66593f52a3cf5178521ac535f369a583c1ed103b7bb03160134def001f9617bae45e6981dedde4e21f3ssdeep: 12288:nBgD4g7LePqEicTarFxIk+txcR9RCpviAzmk8clPhi+JXx1b9NZdOmg:nBgBeKc3SRaqcRpx1b9NXtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T149B54B169C09AC33EB04043019355BA606D9ADA53554B123B9CFFBAF5ABDBD700DFE0Asha3_384: d0c10e6427b978e5a897966229cc786d7768baaeeae48c0531db2853c9ecf2667dd47a0116773138b2d959a65a4b4237ep_bytes: 6850214000e8eeffffff000000000000timestamp: 2012-05-04 06:26:26
Version Info:
Translation: 0x0804 0x04b0Comments: 专为南京富士通计算机设备有限公司DPK系列打印机开发.(Developed for Online_Setup on NFCP DPK Printer).作者:丁 明(Author:DingMing - dingming@fujitsu-nfcp.com)CompanyName: NFCPFileDescription: Updated in 2012.5,V1.91.LegalCopyright: DMLegalTrademarks: EsconProductName: EsconSFileVersion: 1.91ProductVersion: 1.91InternalName: EsconOriginalFilename: Escon.exe

Generik.IKLVWHW also known as:

Lionic	Trojan.Win32.VBKrypt.4!c
MicroWorld-eScan	Trojan.GenericKD.30396764
FireEye	Trojan.GenericKD.30396764
CAT-QuickHeal	Trojan.VbkryptVMF.S22456593
ALYac	Trojan.GenericKD.30396764
Alibaba	Trojan:Win32/VBKrypt.9c8900dd
Cybereason	malicious.713077
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.IKLVWHW
APEX	Malicious
Kaspersky	Trojan.Win32.VBKrypt.nrif
BitDefender	Trojan.GenericKD.30396764
Avast	Win32:Malware-gen
Ad-Aware	Trojan.GenericKD.30396764
TACHYON	Trojan/W32.VB-VBKrypt.2433024
Sophos	Mal/Generic-S
Emsisoft	Trojan.GenericKD.30396764 (B)
GData	Trojan.GenericKD.30396764
Jiangmin	Trojan.VBKrypt.ettj
Antiy-AVL	Trojan/Generic.ASMalwS.129890A
Kingsoft	Win32.Troj.VBKrypt.nr.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!E96787B71307
MAX	malware (ai score=85)
TrendMicro-HouseCall	TROJ_GEN.R002C0WH821
Yandex	Trojan.VBKrypt!YmwtQuL4IBg
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/VBKrypt.NRIF!tr
AVG	Win32:Malware-gen
Panda	Trj/Chgt.A