Generik.LITKZRO removal

The Generik.LITKZRO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.LITKZRO virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes

How to determine Generik.LITKZRO?


File Info:
crc32: 43B90BF5
md5: 078eb881aea5cb47b8617a99df92c719
name: upload_file
sha1: 0bba73b923bd6e602ebc072b295729cc5b8df7b0
sha256: cf67332edc0978dd2641efe1968286d07aecd685abe564c58fa349c51c73feb5
sha512: 45f12ebd37f382f238f056db6eaa1e63856608785f73e94ddafb88514aa8a600786be517586d9b62891f818612681025e3ba5e64127598e85a47ca1a9be602b8
ssdeep: 6144:cLHsfMZz0e/aVq6XX4jYDRbqzN7u/m6mzLccld5b2IOIQlNtGZknCtmx/LhUIT:cjsMAe/aVdXXsYFbqp7dafJLF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2006
InternalName: oscilloscope
FileVersion: 2, 0, 0, 0
CompanyName: Waikato University
PrivateBuild: 
LegalTrademarks: 
Comments: Modified by Cyril COMTE
ProductName: Waikato University oscilloscope-compressor
SpecialBuild: 
ProductVersion: 2, 0, 0, 0
FileDescription: oscilloscope-compressor
OriginalFilename: oscilloscope.exe->compressor
Translation: 0x1409 0x04b0

Generik.LITKZRO also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.69656
FireEye	Trojan.GenericKDZ.69656
Qihoo-360	Win32/Backdoor.554
McAfee	Emotet-FRV!078EB881AEA5
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Emotet.L!c
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKDZ.69656
K7GW	Riskware ( 0040eff71 )
Invincea	Mal/Generic-R + Troj/Emotet-CLO
Cyren	W32/Emotet.AQV.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 85)
Kaspersky	Backdoor.Win32.Emotet.cjrz
Alibaba	Trojan:Win32/Emotet.7e2bbd9b
NANO-Antivirus	Trojan.Win32.Emotet.hrygxr
Rising	Trojan.Kryptik!1.CAF3 (CLASSIC)
Ad-Aware	Trojan.GenericKDZ.69656
F-Secure	Trojan.TR/Emotet.xiims
DrWeb	Trojan.Emotet.1004
Zillya	Trojan.Emotet.Win32.24756
TrendMicro	TrojanSpy.Win32.EMOTET.THIOHBO
Sophos	Troj/Emotet-CLO
Jiangmin	Backdoor.Emotet.sm
Avira	TR/Emotet.xiims
MAX	malware (ai score=82)
Antiy-AVL	Trojan[Backdoor]/Win32.Emotet
Microsoft	Trojan:Win32/Emotet.ARJ!MTB
Arcabit	Trojan.Generic.D11018
ZoneAlarm	Backdoor.Win32.Emotet.cjrz
GData	Trojan.GenericKDZ.69656
AhnLab-V3	Malware/Win32.Generic.C4185182
ALYac	Trojan.GenericKDZ.69656
TACHYON	Trojan/W32.Agent.374784.ME
VBA32	TrojanBanker.Emotet
Malwarebytes	Trojan.MalPack.TRE
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Generik.LITKZRO
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMTHH.hp
Tencent	Malware.Win32.Gencirc.10cdec3d
Ikarus	Trojan-Banker.Emotet
Fortinet	W32/Malicious_Behavior.VEX
AVG	Win32:Malware-gen
Paloalto	generic.ml
MaxSecure	Trojan.Malware.105895048.susgen

How to remove Generik.LITKZRO?

Generik.LITKZRO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X