Generik.JQYFTMH malicious file

The Generik.JQYFTMH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.JQYFTMH virus can do?

Executable code extraction
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generik.JQYFTMH?


File Info:
crc32: C599289C
md5: ff47e6eb2602178a4306e4fcecb15b7d
name: 111.exe
sha1: 294ecaa563146f4ca75b676e13c05320066505b2
sha256: ea5c72bce7e028a6b2f9febd90751bf0e323da00b4b0d68be2a52ed21fe2a4d0
sha512: ee577364d660b48cb4a24dab1e9f892a81b5dc96c71b41dea71c211bbd6175e1af62a09e4da1ee23ff13afd60f4fa8116d259643113fbecfe863c38143dcea18
ssdeep: 6144:2t4BiH46o7+mL62Dx37sb+8i9U3RSmQRfBiHJToV0YblF+ytAq0StUt6F4qXL2HK:w4BKE9sbLi9U36fBKobKBStmHqXuQDL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Copyrightsxa9, 2000 Spnorte Tecnologia
InternalName: TabDock
FileVersion: 1.06
CompanyName: Spnorte Tecnologia
LegalTrademarks: Spnorte and Spnorte.Com are trademarks of Spnorte Tecnologia
Comments: Docking form system for Visual Basic Application
ProductName: TabDock Control
ProductVersion: 1.06
OriginalFilename: TabDock.exe

Generik.JQYFTMH also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.44089117
FireEye	Generic.mg.ff47e6eb2602178a
McAfee	Trickbot-FSYE!FF47E6EB2602
Cylance	Unsafe
BitDefender	Trojan.GenericKD.44089117
Cybereason	malicious.563146
Symantec	ML.Attribute.HighConfidence
Kaspersky	Trojan.Win32.Bsymem.tqj
AegisLab	Trojan.Multi.Generic.4!c
Rising	Trojan.Kryptik!1.C606 (CLASSIC)
Ad-Aware	Trojan.GenericKD.44089117
DrWeb	Trojan.Packed.140
Invincea	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.jh
Emsisoft	Trojan.GenericKD.44089117 (B)
APEX	Malicious
Webroot	W32.Trojan.Gen
Microsoft	Trojan:Win32/Wacatac.C!ml
ZoneAlarm	Trojan.Win32.Bsymem.tqj
GData	Win32.Trojan-Spy.TrickBot.YZPK22
VBA32	BScope.Backdoor.Androm
MAX	malware (ai score=86)
Ikarus	Trojan-Spy.Win32.TrickBot
ESET-NOD32	a variant of Generik.JQYFTMH
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Bsymem.TQJ!tr
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.ea6

How to remove Generik.JQYFTMH?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generik.JQYFTMH malicious file