Malware

Generik.KZYBWIP removal tips

Malware Removal

The Generik.KZYBWIP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.KZYBWIP virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
i.imgur.com

How to determine Generik.KZYBWIP?


File Info:

crc32: BA99DBB0
md5: 9ab7e4503f534ec07d77e00f380bdb97
name: 9AB7E4503F534EC07D77E00F380BDB97.mlw
sha1: 931ffe9a5bc4defe4775d132a2463c5fd565bf83
sha256: 537268ad03c2239537872a77687f834d16c5b9d94633c709516d18eae979c99b
sha512: cc969d08d3feebc63d2757d95d6aa2133f099e0713d7f777206b7066fc811d069d835ad899c11812b5f1ca3d6c2f55f1e50a4ba433491944747b52c232b33a65
ssdeep: 98304:IrgVpgAYBapoeXSnXOt5T0dFmDXdZL4KXvdPDb3Up361xKhZX4cvlSUHRV/2:INAVSBdkDHflD7a3DDlv1HW
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

FileVersion: 10.19041.1.2
CompanyName: Console10app
ProductName: Console10app
ProductVersion: 1.0.0.0
FileDescription: Console10app
OriginalFilename: cp33.exe
Translation: 0x0409 0x04e4

Generik.KZYBWIP also known as:

CylanceUnsafe
ESET-NOD32a variant of Generik.KZYBWIP
APEXMalicious
McAfee-GW-EditionArtemis!Trojan
MicrosoftProgram:Win32/Wacapew.C!ml
McAfeeArtemis!9AB7E4503F53
RisingMalware.Undefined!8.C (CLOUD)

How to remove Generik.KZYBWIP?

Generik.KZYBWIP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment