Malware

Generik.ITQRQLV (file analysis)

Malware Removal

The Generik.ITQRQLV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.ITQRQLV virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.ITQRQLV?


File Info:

crc32: E1AABBD1
md5: b41649b2388a866f63672cd4a1856d3f
name: B41649B2388A866F63672CD4A1856D3F.mlw
sha1: 1d3b3093004045fc417fef35249ae90baf3a6ff8
sha256: 6254b1239a4865aef54559fb8d743c0f7c8760ebc7eabcb61dd977a7a686ade5
sha512: 352e8ab00f9549a7d66c3490c1ec71ae99f119c2ef3af98116eee0a2bdecd638307146213160de17be8cfc11f22d1f22ccdc519e6087f176fa69f2d2f9becb9d
ssdeep: 49152:tQjkJ8MYiqXh4XM7zb1lT68L+t2pyhzn56gplE0n8:tQAJz2X0ubLhit2pyh96g408
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generik.ITQRQLV also known as:

K7AntiVirusTrojan ( 005766ac1 )
LionicTrojan.Win32.Miner.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.45553665
CylanceUnsafe
ZillyaTrojan.Miner.Win32.11670
SangforCoinMiner.Win32.Miner.aszhq
AlibabaTrojan:Win32/Miner.72c75829
K7GWTrojan ( 005766ac1 )
Cybereasonmalicious.2388a8
CyrenW32/Trojan.EWQQ-1220
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.ITQRQLV
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Miner.aszhq
BitDefenderTrojan.GenericKD.45553665
NANO-AntivirusTrojan.Win32.Miner.ikjrxt
MicroWorld-eScanTrojan.GenericKD.45553665
TencentWin32.Trojan.Miner.Pcig
Ad-AwareTrojan.GenericKD.45553665
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.vc
FireEyeTrojan.GenericKD.45553665
EmsisoftTrojan.GenericKD.45553665 (B)
WebrootW32.Malware.Gen
AviraTR/Miner.hxudf
MicrosoftTrojan:Win32/Ymacco.AA62
GDataTrojan.GenericKD.45553665
McAfeeArtemis!B41649B2388A
MAXmalware (ai score=82)
PandaTrj/CI.A
YandexTrojan.Miner!TNjP1JR48sA
IkarusTrojan.SuspectCRC
FortinetRiskware/Miner
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generik.ITQRQLV?

Generik.ITQRQLV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment