Categories: Malware

Generik.IRQSISD removal guide

The Generik.IRQSISD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.IRQSISD virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Created a process from a suspicious location

How to determine Generik.IRQSISD?


File Info:
name: 6F05184AC5A025CD799E.mlwpath: /opt/CAPEv2/storage/binaries/f390538c6212966fe944f4cb493f3ca81f63056784a053259c82e9e1258f5d92crc32: 7419877Emd5: 6f05184ac5a025cd799e6fbe9171bb15sha1: d6bda7058bc52b3b7ac868e9c58b25093e2b1cbdsha256: f390538c6212966fe944f4cb493f3ca81f63056784a053259c82e9e1258f5d92sha512: 70a9964e8b906639d56d1a486d53837c8531172e92de99d8eb5de8628865e6ae4f1639c6c33af0b28821411f4d961e883dc242c60d9f65ff850758957f2171b1ssdeep: 1536:SJez3K/7scfOLDFeF9fvH2oGHOBiNgzAqw7FP2jaSXFky1aNJIsWSqgcdvSotCB6:BDi7scf4A/H2oGHOBiNgzAqJ1scvSoO6type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T14E935B51B5C1D472E5722D324870DAB14E3EFD315E21AE6B3358027A0F252C39B66EAFsha3_384: e8408f8e3cc7183ff3e16662c80c3be475b1014b574cb7a53de03661772b42a34144ff48edd0bcc8fbf043baaceb903fep_bytes: e8c5030000e974feffff558bec6a00fftimestamp: 2021-12-04 19:38:37
Version Info:
0: [No Data]

Generik.IRQSISD also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Shelma.4!c
MicroWorld-eScan	Dropped:Generic.RozenaA.9DA0D283
FireEye	Dropped:Generic.RozenaA.9DA0D283
McAfee	RDN/Generic.grp
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Dropped:Generic.RozenaA.9DA0D283
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.ac5a02
Symantec	Meterpreter
ESET-NOD32	a variant of Generik.IRQSISD
APEX	Malicious
Alibaba	Trojan:Win32/Shelma.6279b92a
Avast	Win32:ShellCode-DD [Trj]
Tencent	Win32.Trojan.Shelma.Wpjp
Ad-Aware	Dropped:Generic.RozenaA.9DA0D283
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R011C0WL821
McAfee-GW-Edition	RDN/Generic.grp
Emsisoft	Dropped:Generic.RozenaA.9DA0D283 (B)
GData	Win32.Trojan.PSE.114IVQD
Jiangmin	Trojan.Shelma.kkg
Avira	TR/Shelma.shppn
MAX	malware (ai score=86)
Gridinsoft	Ransom.Win32.Sabsik.sa
ViRobot	Trojan.Win32.Z.Shelma.91648.OH
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.RozenaA.R456514
BitDefenderTheta	AI:Packer.EEB2574A1C
ALYac	Dropped:Generic.RozenaA.9DA0D283
VBA32	Trojan.Shelma
Malwarebytes	Malware.AI.2572438105
TrendMicro-HouseCall	TROJ_GEN.R011C0WL821
Rising	Trojan.Generic@ML.82 (RDMK:a65tRklVlcHOfOeTa39PAQ)
Yandex	Trojan.Shelma!8f/hSmN76to
Ikarus	Test.file.Eicar
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:ShellCode-DD [Trj]