Malware

Generik.LQVQFVM removal tips

Malware Removal

The Generik.LQVQFVM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.LQVQFVM virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • Creates an excessive number of UDP connection attempts to external IP addresses
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Modifies boot configuration settings
  • Exhibits behavior characteristic of Cerber ransomware
  • Uses suspicious command line tools or Windows utilities

How to determine Generik.LQVQFVM?


File Info:

crc32: D3BA2D48
md5: b5581b6a93a887d2855039a69613e9e6
name: B5581B6A93A887D2855039A69613E9E6.mlw
sha1: 0ab81678e9a1ac10d5a8aef25222653b6ac10b1b
sha256: 66c02a65a79bd18c79f4760984092bc5897b37f3a503a0d69e8bee9cf396e0d7
sha512: 08db608cf89c8ff3808c533439b7dcf01f1c513d8f2f354c17938dddfb658a766e21472c9f2136aae92443b43bb0af8f979c3d55fa5a99db6b495a301b43a032
ssdeep: 6144:kh7oblN4Hu4mylfigDLlBikfUXG+E2wxoXLgpH57:Rlwu4myNDDLfqZE/sQ57
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (c) 2013 Steganos Software GmbH
InternalName: DropCypher.exe
FileVersion: 17.0.2.11443
CompanyName: Steganos Software GmbH
LegalTrademarks: Steganos Safe 17 is a trademark of Steganos Software GmbH
Comments: Steganos Safe 17
ProductName: Steganos Safe 17
ProductVersion: 17.0.2.11443
FileDescription: Dropbox Encryption
OriginalFilename: DropCypher.exe
Translation: 0x0409 0x04e4

Generik.LQVQFVM also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005224381 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.4691
CynetMalicious (score: 100)
CAT-QuickHealTrojanRansom.Crowti.MUE.A4
ALYacTrojan.Ransom.Cerber.1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004f79711 )
Cybereasonmalicious.a93a88
BaiduWin32.Trojan.Kryptik.avk
CyrenW32/S-813a2ccb!Eldorado
SymantecPacked.Generic.459
ESET-NOD32a variant of Generik.LQVQFVM
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Packed.Razy-9779053-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Ransom.Cerber.1
NANO-AntivirusTrojan.Win32.Ransom.evqcdx
MicroWorld-eScanTrojan.Ransom.Cerber.1
TencentWin32.Trojan.Cerber3.Pefo
Ad-AwareTrojan.Ransom.Cerber.1
SophosML/PE-A + Mal/Cerber-B
ComodoTrojWare.Win32.Kryptik.ERJ@6l0vie
BitDefenderThetaGen:NN.ZexaF.34686.Hq1@a888Xexi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HPCERBER.SM3
McAfee-GW-EditionBehavesLike.Win32.Malware.hm
FireEyeGeneric.mg.b5581b6a93a887d2
EmsisoftTrojan.Ransom.Cerber.1 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.ZPACK.Gen
MicrosoftRansom:Win32/Cerber.A
ArcabitTrojan.Ransom.Cerber.1
AegisLabTrojan.Win32.Generic.4!c
GDataTrojan.Ransom.Cerber.1
AhnLab-V3Win-Trojan/Lukitus2.Exp
Acronissuspicious
McAfeeGenericRXDI-ZQ!B5581B6A93A8
MAXmalware (ai score=99)
VBA32BScope.Malware-Cryptor.Hlux
MalwarebytesMalware.AI.1147884621
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_HPCERBER.SM3
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazqmjVlikDJ2mwbLkQNLKz0z)
YandexTrojan.GenAsa!a6R4eRteHx4
IkarusTrojan-Ransom.Cerber
FortinetW32/Kryptik.HEKH!tr
AVGWin32:Evo-gen [Susp]

How to remove Generik.LQVQFVM?

Generik.LQVQFVM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment