Malware

Generik.LWHEPSY removal tips

Malware Removal

The Generik.LWHEPSY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.LWHEPSY virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Anomalous binary characteristics

Related domains:

i.imgur.com

How to determine Generik.LWHEPSY?


File Info:

crc32: 554A9F8A
md5: 2e4039f737de2a16455febf189d28514
name: upload_file
sha1: 37e29defca57fc1be028b9e10e965cf6e62d1c0e
sha256: 0375ecd66ce87cba73a5eb5f4b6b14223707ec855ade58ee717ec0fd862fb0fd
sha512: 4a319410e77f1c44087da8a9863eb825245b3fc6a0b3b70d4abfc93d6067110bb7ae98b418405a548db887b86cb857a68ecf1eac45c093289ffdeca0cb325141
ssdeep: 24576:g3f+ek8yt9g0VObXN2qEZnB0PSfhC0BfhyedBxT+YD6DoZn:gP+eBAuQnaKfzhyOBxT+Yrn
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright:
InternalName:
FileVersion: 11.5.22.5
CompanyName: Runtime Brooker
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 11.55.22.8
FileDescription: Runtime
OriginalFilename:
Translation: 0x0c09 0x04e4

Generik.LWHEPSY also known as:

MicroWorld-eScanTrojan.GenericKD.44207278
FireEyeTrojan.GenericKD.44207278
ALYacTrojan.GenericKD.44207278
BitDefenderTrojan.GenericKD.44207278
TrendMicroTROJ_GEN.R06BC0WJT20
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Backdoor.Win32.Remcos.gen
AlibabaBackdoor:Win32/Remcos.a390c4a7
AegisLabTrojan.Multi.Generic.4!c
TencentWin32.Backdoor.Remcos.Hssm
Ad-AwareTrojan.GenericKD.44207278
EmsisoftTrojan.GenericKD.44207278 (B)
F-SecureBackdoor.BDS/Remcos.nutat
DrWebBackDoor.Rat.281
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-S
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
AviraBDS/Remcos.nutat
MAXmalware (ai score=86)
MicrosoftTrojan:Win32/Wacatac.C!ml
ArcabitTrojan.Generic.D2A28CAE
ZoneAlarmHEUR:Backdoor.Win32.Remcos.gen
GDataTrojan.GenericKD.44207278
AhnLab-V3Malware/Win32.Generic.C4213966
McAfeeArtemis!2E4039F737DE
VBA32BScope.Backdoor.Rat
PandaTrj/GdSda.A
ESET-NOD32a variant of Generik.LWHEPSY
TrendMicro-HouseCallTROJ_GEN.R06BC0WJT20
FortinetW32/GenKryptik.EUOM!tr
AVGWin32:Trojan-gen
Qihoo-360Win32/Backdoor.a07

How to remove Generik.LWHEPSY?

Generik.LWHEPSY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment