Generik.JRDZWRD removal tips

The Generik.JRDZWRD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.JRDZWRD virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Deletes executed files from disk

How to determine Generik.JRDZWRD?


File Info:
name: 592C54C181B060960AD9.mlw
path: /opt/CAPEv2/storage/binaries/30d0abd070dc16d7a1bf2ad01ca7b325c9d1b0cf060db33915473455781b65e2
crc32: D00AD147
md5: 592c54c181b060960ad917dfb82c26ed
sha1: 5a5acfd51b1fdcfbbfe3167cbdffef975c8b2f11
sha256: 30d0abd070dc16d7a1bf2ad01ca7b325c9d1b0cf060db33915473455781b65e2
sha512: f20a1a8f4d1a7d23cdfaa2042c04e26ed6a749d514a337de8d2a105b5932228a427bf794e8f30f0836587241ba7099492dee7069fc7a572d63aeaa118d2b6ce5
ssdeep: 6144:7BlkZvaF4NTB+/ZecxBLnOP1QVUjfcqyDxMXD:7oSWNTwUrP1OUjfcqyDg
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D3744B0AAFACCEDBC5E1EC3D1679A21AC6FBC971897D4682D7D97E0EC075CD02928450
sha3_384: eff90de6843c61777f69de72b685e30bf96beff1359a31e86b4ec2ba5acec3ca4cc5b8f984154e8ac137cb5b1708432f
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2019-07-30 08:52:45

Version Info:
0: [No Data]

Generik.JRDZWRD also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Starter.4!c
AVG	FileRepMalware [Misc]
MicroWorld-eScan	Trojan.GenericKD.71647635
FireEye	Generic.mg.592c54c181b06096
CAT-QuickHeal	Trojan.Starter
Skyhigh	BehavesLike.Win32.Generic.fm
ALYac	Trojan.GenericKD.71647635
Cylance	unsafe
Sangfor	Ransom.Win32.Save.a
Alibaba	Trojan:Win32/Starter.825e6ce8
Cybereason	malicious.181b06
BitDefenderTheta	Gen:NN.ZexaF.36802.wuW@aaoynCb
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Generik.JRDZWRD
Cynet	Malicious (score: 100)
ClamAV	Win.Trojan.Generic-10011119-0
Kaspersky	Trojan.Win32.Starter.aobb
BitDefender	Trojan.GenericKD.71647635
Avast	FileRepMalware [Misc]
Emsisoft	Trojan.GenericKD.71647635 (B)
F-Secure	Trojan.TR/Starter.rdocj
VIPRE	Trojan.GenericKD.71647635
Sophos	Mal/Generic-S
Ikarus	Trojan.Starter
Varist	W32/Fuery.P.gen!Eldorado
Avira	TR/Starter.rdocj
Kingsoft	Win32.Trojan.Starter.a
Arcabit	Trojan.Generic.D4454193
ZoneAlarm	Trojan.Win32.Starter.aobb
GData	Trojan.GenericKD.71647635
Google	Detected
McAfee	Artemis!592C54C181B0
MAX	malware (ai score=85)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H07BL24
Rising	Trojan.Starter!8.2BC (CLOUD)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.22019.susgen
Fortinet	Malicious_Behavior.SB
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)
alibabacloud	Trojan:Win/Starter.aobb

How to remove Generik.JRDZWRD?

Generik.JRDZWRD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X