Malware

Generik.LYZJDPR (file analysis)

Malware Removal

The Generik.LYZJDPR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.LYZJDPR virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Generik.LYZJDPR?


File Info:

crc32: 259F7C24
md5: b2752a134e7e8956023b1dcbd916d4c5
name: B2752A134E7E8956023B1DCBD916D4C5.mlw
sha1: 22f390a03e441539b4beae05ef94b397060d3a78
sha256: cb24372cf9152d5609c66fd4a019b4c7d851cc40918f1131eca351ce335474d7
sha512: 4393870c6b0ce92cd9aa7aa2cdd8de92146b59daf0451244423f504b8b0867ff1cb560868a90d4fa2dc40267f65db029a2e32585142dfb95191f514ed2278a5b
ssdeep: 6144:DMEm9ry5F5Y5JWDvCoA036Qx4dGkwe+zrfmSy6y:DMC5F5YeDv7lpSKpdy
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2013 Nero AG and its licensors
InternalName: NeroDisc
FileVersion: 15,0,25,0
CompanyName: Nero AG
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: NeroDiscMergeWrongDisc
SpecialBuild: 15,0,25,0
ProductVersion: 15,0,25,0
FileDescription: NeroDiscMergeWrongDisc Application
OriginalFilename: NeroDiscMergeWrongDisc.exe
Translation: 0x0409 0x04e4

Generik.LYZJDPR also known as:

K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.5047
CynetMalicious (score: 99)
CAT-QuickHealDownldr.Freepds.MUE.ZZ5
ALYacGen:Variant.Zusy.320442
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaRansom:Win32/Tovicrypt.f7f13628
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.34e7e8
CyrenW32/S-8ecc9d92!Eldorado
SymantecTrojan.Malcol.Ransom.2
ESET-NOD32a variant of Generik.LYZJDPR
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zusy.320442
NANO-AntivirusTrojan.Win32.Zusy.evnmig
MicroWorld-eScanGen:Variant.Zusy.320442
TencentWin32.Trojan.Generic.Pdvp
Ad-AwareGen:Variant.Zusy.320442
SophosMal/Generic-S
ComodoMalware@#j3b0jj3iolgh
BitDefenderThetaGen:NN.ZexaF.34142.yy0@aWB5oDti
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Crypmic-1
FireEyeGeneric.mg.b2752a134e7e8956
EmsisoftGen:Variant.Zusy.320442 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1110705
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.22DF09A
MicrosoftRansom:Win32/Tovicrypt.A
GDataGen:Variant.Zusy.320442
AhnLab-V3Trojan/Win32.Generic.C2278171
Acronissuspicious
McAfeeRansomware-GJA!B2752A134E7E
MAXmalware (ai score=96)
VBA32BScope.Trojan.Bagsu
MalwarebytesMalware.AI.2451378745
PandaTrj/Genetic.gen
TrendMicro-HouseCallMal_Crypmic-1
RisingTrojan.Generic@ML.99 (RDML:UGOkEMYxulXxvTtmPmiMPQ)
YandexTrojan.GenAsa!QApzGEBtZck
IkarusTrojan-Ransom.Tovicrypt
FortinetW32/Kryptik.FNZR!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generik.LYZJDPR?

Generik.LYZJDPR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment