Malware

Generik.KEWJWZS (file analysis)

Malware Removal

The Generik.KEWJWZS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generik.KEWJWZS virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Generik.KEWJWZS?



File Info:

crc32: 3FC53539
md5: e5e379461c9fbce9bddb0b4022e73ad5
name: E5E379461C9FBCE9BDDB0B4022E73AD5.mlw
sha1: e3ab63c9470cfbf83158aad00b7ed8e8d84458c4
sha256: 34e0c00d6cb90d7f42ebcac785eee19cabdac1e2e44726eabae1afd33f3a5161
sha512: 42f0469527590a69b624ce274e1987723765d4ec251aa07fe2abb57da0d09906e3a7ad28d30d3c08666fbb0a22e069d24a42fff05cd3d7afc3b4f9f57455e8ef
ssdeep: 1536:rw96NQKLjWDyy1o5I0hJUEbooPRrKKRRySuJz:U6NQKPWDyDI0hJltZrpRRypR
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: (C) Microsoft Corporation. All rights reserved.
InternalName: Notepad
FileVersion: 5.1.2600.5512 (xpsp.080413-2105)
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows(R) Operating System
ProductVersion: 5.1.2600.5512
FileDescription: x8bb0x4e8bx672c
OriginalFilename: NOTEPAD.EXE
Translation: 0x0804 0x04b0

Generik.KEWJWZS also known as:

K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
CAT-QuickHealTrojan.Katusha
ALYacGen:Heur.Mint.Zard.24
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Katusha.09f674ad
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.61c9fb
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.KEWJWZS
APEXMalicious
AvastFileRepMalware
KasperskyPacked.Win32.Katusha.o
BitDefenderGen:Heur.Mint.Zard.24
MicroWorld-eScanGen:Heur.Mint.Zard.24
TencentWin32.Packed.Katusha.Amlv
Ad-AwareGen:Heur.Mint.Zard.24
SophosML/PE-A + ATK/Shellter-AC
TrendMicroBackdoor.Win32.SWRORT.SMB
McAfee-GW-EditionMalHeur-FAG!E5E379461C9F
FireEyeGeneric.mg.e5e379461c9fbce9
EmsisoftGen:Heur.Mint.Zard.24 (B)
AviraHEUR/AGEN.1124598
MicrosoftTrojan:Win32/Swrort.A
ArcabitTrojan.Mint.Zard.24
AegisLabHacktool.Win32.Katusha.x!c
ZoneAlarmPacked.Win32.Katusha.o
GDataGen:Heur.Mint.Zard.24
AhnLab-V3Packed/Win32.RL_Katusha.R361750
McAfeeMalHeur-FAG!E5E379461C9F
MAXmalware (ai score=83)
VBA32BScope.Trojan.Swrort
TrendMicro-HouseCallBackdoor.Win32.SWRORT.SMB
RisingTrojan.Swrort!8.296 (CLOUD)
IkarusTrojan.Win32.Dialer
FortinetW32/Generic.AC.3A1D4B!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Swrort.HwgAkuIA

How to remove Generik.KEWJWZS?

Generik.KEWJWZS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment