Malware

Should I remove “Generik.LEGVQYH”?

Malware Removal

The Generik.LEGVQYH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.LEGVQYH virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.LEGVQYH?


File Info:

crc32: D8388827
md5: f148b29cb2b42d3d7fbb09e30fc45cd1
name: F148B29CB2B42D3D7FBB09E30FC45CD1.mlw
sha1: 894dd2de2724882dd29a103efcc78ed04de833ff
sha256: 12172ac8b9280dbc295200ae8b745af01985bbbf186615b112c082cc3a48f28b
sha512: a986016f4ac7564423ad4e5abaf26802b70cc8b73b1f826620cbfc513f7371594069b4f38687664707929ae2cd19712daf0de8af0714f7fb0332d6bf907a4502
ssdeep: 6144:hK7o5T4jckVq33RpBBa9Tcuie5TUgaPibL7wda1T+8x:o7o5TUA33Rpra9YuieZUg9b/wdNW
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2015
InternalName: Java Update Scheduler
FileVersion: 2.8.51.16
Full Version: 2.8.51.16
CompanyName: Oracle Corporation
ProductName: Java Platform SE Auto Updater
ProductVersion: 2.8.51.16
FileDescription: Java Update Scheduler
OriginalFilename: jusched.exe
Translation: 0x0409 0x04b0

Generik.LEGVQYH also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
ALYacTrojan.GenericKD.40646077
CylanceUnsafe
AlibabaTrojan:Win32/Cometer.2ffab299
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.cb2b42
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.LEGVQYH
APEXMalicious
AvastFileRepMalware
KasperskyTrojan.Win32.Cometer.bvo
BitDefenderTrojan.GenericKD.40646077
NANO-AntivirusTrojan.Win32.Cometer.fjvgsa
MicroWorld-eScanTrojan.GenericKD.40646077
TencentWin32.Trojan.Cometer.Eacu
Ad-AwareTrojan.GenericKD.40646077
SophosMal/Generic-S
McAfee-GW-EditionRansomware-FKM!F148B29CB2B4
FireEyeTrojan.GenericKD.40646077
EmsisoftTrojan.GenericKD.40646077 (B)
MicrosoftTrojan:Win32/Swrort.A
GDataTrojan.GenericKD.40646077
McAfeeRansomware-FKM!F148B29CB2B4
RisingTrojan.Generic@ML.89 (RDML:WhUHEzFtPrz6e2pkOtZw1w)
IkarusTrojan.Win32.Swrort
FortinetW32/Ransomware.FKM!tr
AVGFileRepMalware
Qihoo-360Win32/Trojan.Swrort.HgIASVUA

How to remove Generik.LEGVQYH?

Generik.LEGVQYH removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment