Categories: Malware

Generik.MGPOAUG removal guide

The Generik.MGPOAUG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.MGPOAUG virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
Drops a binary and executes it
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

mayserver-bamzy.ddns.net

How to determine Generik.MGPOAUG?


File Info:
crc32: DA5E91B0md5: 3ba622df311df18ba36585a6e77ea4e4name: ptr.exesha1: 507566c87db5834b0f7eed52db036a56f1c49607sha256: f5fbae1207fc9f060fd6a8c4db58c89e1abe5e8283d24fe11c9e3cde38e83016sha512: 82fe7cdbbd34ae766335dfa82d742ae0d251f7d8841df51e27bed02f5678c7b9d0da5f6a523ec76b29d3b4a0f2c74d38a71c5f504970aedfab560894badb685bssdeep: 49152:6l5HQiwBGfH1FjzFlL+v+9mb2JKsMXIrvJKtORizuQJIMQSTTE9z9IG:ytZN+J2JKatKtaQuQvE9type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: xpsrchvw.exeFileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)CompanyName: Microsoft CorporationProductName: Microsoftxae Windowsxae Operating SystemProductVersion: 6.1.7600.16385FileDescription: XPS ViewerOriginalFilename: xpsrchvw.exeTranslation: 0x0409 0x04b0

Generik.MGPOAUG also known as:

MicroWorld-eScan	Trojan.GenericKD.33920960
FireEye	Generic.mg.3ba622df311df18b
Cylance	Unsafe
Sangfor	Malware
BitDefender	Trojan.GenericKD.33920960
APEX	Malicious
GData	Trojan.GenericKD.33920960
Kaspersky	Backdoor.Win32.NetWiredRC.lag
AegisLab	Trojan.Multi.Generic.4!c
Tencent	Win32.Backdoor.Netwiredrc.Lmuw
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
Emsisoft	Trojan.GenericKD.33920960 (B)
Ikarus	Backdoor.Win32.NetWireRC
Arcabit	Trojan.Generic.D20597C0
ZoneAlarm	Backdoor.Win32.NetWiredRC.lag
Microsoft	PUA:Win32/Presenoker
MAX	malware (ai score=88)
Ad-Aware	Trojan.GenericKD.33920960
Panda	Trj/CI.A
ESET-NOD32	a variant of Generik.MGPOAUG
SentinelOne	DFI – Suspicious PE
Fortinet	W32/NetWiredRC.LAG!tr.bdr
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Backdoor.5d7