Malware

Generik.JKMYOYZ removal guide

Malware Removal

The Generik.JKMYOYZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.JKMYOYZ virus can do?

  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • A potential decoy document was displayed to the user
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.JKMYOYZ?


File Info:

crc32: 724A2ACB
md5: e39e70434cb986044e66ad76f76d1153
name: upload_file
sha1: 1e2104d07b9da8b4a091611281884c34e8cebf16
sha256: ad6b1ee638251f696964e6cedf93d55eea5442a83843a4fbd5676114d46cd645
sha512: 4d6fcd231bb036f94b5a4f275d02ba98e17ffb06945c56ed0c739fe1fc14322a6ef22b7e9ab9b3c12cbd3bd27c665d6bd4e81fab6c4742c2ef7b25a985bf4437
ssdeep: 3072:0cfhWonne96ugYxXTqKUkswJ/6PETkjDi52+CJQi6LcfCqOXQVMuJF5:0mWonJnbkbJ//2DM2+XDLlQaAF5
type: Composite Document File V2 Document, No summary info

Version Info:

0: [No Data]

Generik.JKMYOYZ also known as:

MicroWorld-eScanTrojan.GenericKD.43936662
FireEyeTrojan.GenericKD.43936662
ALYacTrojan.GenericKD.43936662
AegisLabHacktool.MSOffice.CVE-2017-0199.3!c
SymantecTrojan.Gen.MBT
KasperskyHEUR:Exploit.MSOffice.CVE-2017-0199.a
BitDefenderTrojan.GenericKD.43936662
ViRobotDOC.Z.CVE-2017-0199.175104.G
Ad-AwareTrojan.GenericKD.43936662
SophosTroj/DocDl-AAUU
ComodoMalware@#1m5xgx77fiedo
F-SecureExploit.EXP/CVE-2017-0199.rawsq
InvinceaTroj/DocDl-AAUU
McAfee-GW-EditionRDN/Generic Exploit
EmsisoftTrojan.GenericKD.43936662 (B)
AviraEXP/CVE-2017-0199.rawsq
MAXmalware (ai score=99)
MicrosoftExploit:O97M/CVE-2017-0199.RBA!MTB
ArcabitTrojan.Generic.D29E6B96
ZoneAlarmHEUR:Exploit.MSOffice.CVE-2017-0199.a
GDataTrojan.GenericKD.43936662
CynetMalicious (score: 85)
McAfeeRDN/Generic Exploit
TACHYONSuspicious/W97.CVE-2017-0199
ESET-NOD32a variant of Generik.JKMYOYZ
IkarusExploit.CVE-2017-0199
FortinetMSOffice/CVE_2017_0199.A!exploit
AVGOther:Malware-gen [Trj]
Qihoo-360Generic/Trojan.Exploit.769

How to remove Generik.JKMYOYZ?

Generik.JKMYOYZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment