Categories: Malware

Should I remove “Generik.JJWRXUX”?

The Generik.JJWRXUX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.JJWRXUX virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
HTTPS urls from behavior.
Authenticode signature is invalid
Attempts to modify proxy settings
Harvests cookies for information gathering
Anomalous binary characteristics

How to determine Generik.JJWRXUX?


File Info:
name: 83A4B0F82FA606D7F607.mlwpath: /opt/CAPEv2/storage/binaries/848be86f67f602970fd9fea17e96c4fdfd7a67b768b6b4d542856e209bf3507ccrc32: 5FB9A1FAmd5: 83a4b0f82fa606d7f607982edd02237csha1: 15e66f671ef8f310b2ce51ca05d6be9b57d4e877sha256: 848be86f67f602970fd9fea17e96c4fdfd7a67b768b6b4d542856e209bf3507csha512: 8bf3077f0956cacfb310c832780def351627c4c3d73abe2cdfc7a2dce29042d4054d5d311c7bad543e65ea65060d4701fa0e14435722e5e7856bbf606d0d34f8ssdeep: 3072:EHVFJYQT/qr//GEVw9XzbdJiSad5LX0Q2Dt53IxI:AFJYQT+ijb2h20type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T185E37C2132E0C072E01625B98525C7B19EAF7C756A66AE8F7FC90AFC4F187E1D71530Asha3_384: 67434b05735e6ae1bb4cda476111fa9a0372485d2761567398d82c0d789985e6f31edfb5988caae43b636498cc2bb170ep_bytes: e85f3f0000e978feffff8bff558bec81timestamp: 2020-08-03 05:34:47
Version Info:
0: [No Data]

Generik.JJWRXUX also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader35.13781
MicroWorld-eScan	Gen:Trojan.Heur.RP.iuX@bKZVjpoi
FireEye	Generic.mg.83a4b0f82fa606d7
ALYac	Gen:Trojan.Heur.RP.iuX@bKZVjpoi
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.1290542
Sangfor	Trojan.Win32.Wacatac.D8
Alibaba	TrojanDownloader:Win32/Redcap.c712e42f
Cybereason	malicious.82fa60
BitDefenderTheta	AI:Packer.FC0D0C761F
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.JJWRXUX
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Downloader.Win32.Generic
BitDefender	Gen:Trojan.Heur.RP.iuX@bKZVjpoi
NANO-Antivirus	Trojan.Win32.Redcap.igbqiy
Avast	Win32:Dh-A [Heur]
Tencent	Malware.Win32.Gencirc.11b16624
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
Emsisoft	Gen:Trojan.Heur.RP.iuX@bKZVjpoi (B)
Jiangmin	TrojanDownloader.Generic.bcqc
Avira	HEUR/AGEN.1140355
Microsoft	Trojan:Win32/Ymacco.AA84
GData	Gen:Trojan.Heur.RP.iuX@bKZVjpoi
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.Reputation.C4228858
McAfee	Artemis!83A4B0F82FA6
MAX	malware (ai score=83)
VBA32	suspected of Trojan.Downloader.gen
APEX	Malicious
Rising	Downloader.Generic!8.141 (RDMK:cmRtazq9TOcLyMZnAoic47rdJvJV)
Yandex	Trojan.GenAsa!rTeWkFM/B0w
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7175239.susgen
Fortinet	W32/Generic!tr.dldr
AVG	Win32:Dh-A [Heur]
CrowdStrike	win/malicious_confidence_90% (W)