Malware

Generik.JUSASR removal tips

Malware Removal

The Generik.JUSASR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generik.JUSASR virus can do?

  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary file triggered YARA rule

How to determine Generik.JUSASR?



File Info:

name: 5EE6AF3371CBC4481ACA.mlw
path: /opt/CAPEv2/storage/binaries/b92cbc6e9dce62363f430790f43c19b3f5d51739777a743230f1c5045bd78003
crc32: 6FBC5118
md5: 5ee6af3371cbc4481aca82694ce95247
sha1: 8e32b6ea47d6a2a5eeac71cdeedbe3815c0bc446
sha256: b92cbc6e9dce62363f430790f43c19b3f5d51739777a743230f1c5045bd78003
sha512: e953d8be0925a911fb138049411263c48c709280faccca74a2f2af60673b898901210fef012e703703797cb0d9cf584571addc88468cbe3301ee29e16b90a310
ssdeep: 196608:J1a6o9S1IsusXCP1Gv7TvkndzOGGKs/O:J1aw1ksSdM/5v/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D06622043184CB51C46E3EF1A4AD52BC03726E9F9A62DF162DB476DA0A77353CE2660F
sha3_384: ad6bc05f07b875d8e6b3af9ce82244601fa50ec33a42bf240cd7fa97dc3fea52d500dd7980c051ba5189ef32f3df4c40
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-06-30 15:33:47


Version Info:

Translation: 0x0000 0x04b0
Comments: EnPOS ,INTER Yazar Kasaları İçin Arka Ofis Uygulaması
CompanyName: EnPOS
FileDescription: PromoPos Midi Arka Ofis Uygulaması
FileVersion: 2.0.4.4
InternalName: PromoPos Midi.exe
LegalCopyright: EnPOS ©  2016
OriginalFilename: PromoPos Midi.exe
ProductName: PromoPos Midi
ProductVersion: 2.0.4.4
Assembly Version: 2.0.4.4

Generik.JUSASR also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
SkyhighArtemis!Trojan
Cylanceunsafe
SangforTrojan.Win32.Agent.Vu1l
AlibabaTrojanDropper:Win32/Generic.7fa31812
SymantecTrojan.Gen.2
ESET-NOD32a variant of Generik.JUSASR
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0WA924
KasperskyUDS:DangerousObject.Multi.Generic
NANO-AntivirusTrojan.Win32.Crypt.ereumz
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.13fcea67
F-SecureTrojan.TR/Dropper.MSIL.Gen
TrendMicroTROJ_GEN.R002C0WA924
SophosMal/Generic-S
GoogleDetected
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!5EE6AF3371CB
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/GdSda.A
RisingTrojan.Crypt!8.2E3 (CLOUD)
YandexTrojan.Crypt!dmOHRgIRrJk
IkarusTrojan.Dropper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Crypt.EDNE!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Generik.JUSASR?

Generik.JUSASR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment