Generik.KDOSUEQ removal tips

The Generik.KDOSUEQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.KDOSUEQ virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Deletes its original binary from disk
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Spoofs its process name and/or associated pathname to appear as a legitimate process
Creates a hidden or system file
Creates a copy of itself
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

dhlglobalexpress.shop

How to determine Generik.KDOSUEQ?


File Info:
crc32: 7035296D
md5: c91e274e1a336e5af5baef282d54ad5f
name: C91E274E1A336E5AF5BAEF282D54AD5F.mlw
sha1: 77b5c4ba4f25b247d08ba1dc378ddbeb1e6bbba7
sha256: a105b485a43cdc606e7a040fb26e557fbd302be0b5f1b865bade788b5cfd0866
sha512: 55d6d61ef2380b99b1b6b97963b282309a29b1434fbe8acdc72e887a0e57732cc7e5e5702fe4c067bc641945eb63931d3ed5a7833519051cf6e34a3bcdce5f0e
ssdeep: 6144:Z8LxBzkX38LwqjbBisKmZI2XJCyRXoEsOZ:A2MXisKmZRXNRXoiZ
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: wro
FileVersion: 6.17.5.3.
CompanyName: awzpsbnmouqlv
LegalTrademarks: hakolrpqpvrokw
Comments: eqivgvquwjkfxqoths
ProductName: rdvkoirwjazv
FileDescription: ndqabaofzyfjlnwrrtmf
Translation: 0x0000 0x04e4

Generik.KDOSUEQ also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Sangfor	Trojan.Win32.Save.a
Alibaba	Backdoor:Win32/Lokibot.d514dbaf
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.e1a336
Cyren	W32/Injector.ALF.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.KDOSUEQ
APEX	Malicious
Avast	NSIS:PWSX-gen [Trj]
Kaspersky	VHO:Trojan.Win32.Sdum.gen
BitDefender	Trojan.GenericKD.37592001
MicroWorld-eScan	Trojan.NSISX.Spy.Gen.1
Tencent	Win32.Backdoor.Fareit.Auto
Ad-Aware	Trojan.GenericKD.37592001
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.UMal.szvpl@0
F-Secure	Heuristic.HEUR/AGEN.1142362
McAfee-GW-Edition	BehavesLike.Win32.Trojan.dc
FireEye	Generic.mg.c91e274e1a336e5a
Emsisoft	Trojan.GenericKD.37592001 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.DECC
Avira	HEUR/AGEN.1142362
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Trojan:Win32/Lokibot.DECC!MTB
ZoneAlarm	HEUR:Backdoor.Win32.Androm.gen
GData	Trojan.GenericKD.37592001
AhnLab-V3	Trojan/Win.Nsis.C4371168
McAfee	RDN/Generic.dx
MAX	malware (ai score=82)
Panda	Trj/CI.A
Ikarus	Trojan.Agent
Fortinet	W32/PossibleThreat
AVG	NSIS:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove Generik.KDOSUEQ?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generik.KDOSUEQ removal tips