Malware

Generik.LBVQDOR (file analysis)

Malware Removal

The Generik.LBVQDOR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.LBVQDOR virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Attempts to stop active services
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

How to determine Generik.LBVQDOR?


File Info:

crc32: 4906C39F
md5: 680aa77f1cb96bdcdbd7326497f8daae
name: 680AA77F1CB96BDCDBD7326497F8DAAE.mlw
sha1: ba675e1cab65f32c8251d125a67b148483e3b068
sha256: 94604e83e2b8ae5da60ba9f9d98cc02da76646518897eda0bf08eff63ca446eb
sha512: 539d4682e5161976e1bb01aad9160a9fd846d700777b2ec407742be10c6b88a596cdeddbb0b716c3103e410fde26a7dc056e11bdc466fd774d543095c50a3dfe
ssdeep: 24576:E53uhFhDZVFTiDT3dduEprVXwmQU4RV8r+qMT1uz+4NQ:E5+hF1ZDeTZrVXwZUUV8ryT1mg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2017 Kadokawa. All rights reserved.
InternalName: game_exe
FileVersion: 0.0.0.0
CompanyName: KADOKAWA
Builder: admin 07:28:47 17/06/2021
Created: 7z SFX Constructor v4.3.0.1 (http://usbtor.ru/viewtopic.php?t=798)
ProductName: game
ProductVersion: 0.0.0.0
FileDescription: game
OriginalFilename: game.exe
Translation: 0x0000 0x04b0

Generik.LBVQDOR also known as:

BkavW32.AIDetect.malware1
CynetMalicious (score: 100)
CAT-QuickHealBackdoor.MSIL
ALYacTrojan.GenericKD.46515962
CylanceUnsafe
SangforBackdoor.MSIL.Crysan.bzo
AlibabaBackdoor:MSIL/Crysan.d423f337
Cybereasonmalicious.f1cb96
CyrenW32/Trojan.GFXM-7732
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.LBVQDOR
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Malware.Doina-9874077-0
KasperskyBackdoor.MSIL.Crysan.bzo
BitDefenderTrojan.GenericKD.46515962
MicroWorld-eScanTrojan.GenericKD.46515962
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R011C0WFK21
McAfee-GW-EditionBehavesLike.Win32.PUP.dc
FireEyeGeneric.mg.680aa77f1cb96bdc
EmsisoftTrojan.GenericKD.46515962 (B)
SentinelOneStatic AI – Suspicious SFX
JiangminTrojan/CoinMiner.ab.a
AviraBDS/Redcap.wukir
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:Win32/Ditertag.A
ArcabitTrojan.Generic.D2C5C6FA
AegisLabTrojan.MSIL.Crysan.m!c
GDataTrojan.GenericKD.46515962
AhnLab-V3Malware/Win.Redcap.C4530103
McAfeeArtemis!680AA77F1CB9
MAXmalware (ai score=100)
VBA32Trojan.Hesv
MalwarebytesBackdoor.AsyncRAT
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R03FH0CFK21
YandexTrojan.Agent!2K6qJM5y/xE
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.119094016.susgen
FortinetW32/Crysan.BZO!tr.bdr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Generik.LBVQDOR?

Generik.LBVQDOR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment