Categories: Malware

Generik.JKMYOYZ removal guide

The Generik.JKMYOYZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.JKMYOYZ virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Reads data out of its own binary image
Uses Windows utilities for basic functionality
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generik.JKMYOYZ?


File Info:
crc32: 724A2ACBmd5: e39e70434cb986044e66ad76f76d1153name: upload_filesha1: 1e2104d07b9da8b4a091611281884c34e8cebf16sha256: ad6b1ee638251f696964e6cedf93d55eea5442a83843a4fbd5676114d46cd645sha512: 4d6fcd231bb036f94b5a4f275d02ba98e17ffb06945c56ed0c739fe1fc14322a6ef22b7e9ab9b3c12cbd3bd27c665d6bd4e81fab6c4742c2ef7b25a985bf4437ssdeep: 3072:0cfhWonne96ugYxXTqKUkswJ/6PETkjDi52+CJQi6LcfCqOXQVMuJF5:0mWonJnbkbJ//2DM2+XDLlQaAF5type: Composite Document File V2 Document, No summary info
Version Info:
0: [No Data]

Generik.JKMYOYZ also known as:

MicroWorld-eScan	Trojan.GenericKD.43936662
FireEye	Trojan.GenericKD.43936662
ALYac	Trojan.GenericKD.43936662
AegisLab	Hacktool.MSOffice.CVE-2017-0199.3!c
Symantec	Trojan.Gen.MBT
Kaspersky	HEUR:Exploit.MSOffice.CVE-2017-0199.a
BitDefender	Trojan.GenericKD.43936662
ViRobot	DOC.Z.CVE-2017-0199.175104.G
Ad-Aware	Trojan.GenericKD.43936662
Sophos	Troj/DocDl-AAUU
Comodo	Malware@#1m5xgx77fiedo
F-Secure	Exploit.EXP/CVE-2017-0199.rawsq
Invincea	Troj/DocDl-AAUU
McAfee-GW-Edition	RDN/Generic Exploit
Emsisoft	Trojan.GenericKD.43936662 (B)
Avira	EXP/CVE-2017-0199.rawsq
MAX	malware (ai score=99)
Microsoft	Exploit:O97M/CVE-2017-0199.RBA!MTB
Arcabit	Trojan.Generic.D29E6B96
ZoneAlarm	HEUR:Exploit.MSOffice.CVE-2017-0199.a
GData	Trojan.GenericKD.43936662
Cynet	Malicious (score: 85)
McAfee	RDN/Generic Exploit
TACHYON	Suspicious/W97.CVE-2017-0199
ESET-NOD32	a variant of Generik.JKMYOYZ
Ikarus	Exploit.CVE-2017-0199
Fortinet	MSOffice/CVE_2017_0199.A!exploit
AVG	Other:Malware-gen [Trj]
Qihoo-360	Generic/Trojan.Exploit.769