Malware

What is “Generik.MQYAFAD”?

Malware Removal

The Generik.MQYAFAD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.MQYAFAD virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.MQYAFAD?


File Info:

crc32: FF02B4B5
md5: b56bbe6855a09728444dfb5417d7bdd9
name: B56BBE6855A09728444DFB5417D7BDD9.mlw
sha1: 4ff048495b5cbca15097d8933c80c00b53271e3d
sha256: 1e24fe030ddc73a3a76eb9687d20ad353c815ec570ff1fc972ebb7be9213660f
sha512: fe7b2b5182083f1f985a2d046f1f9e86010ae0a0896a74d8e92e303128723ffd8e015dad9c482d8b3afb6805c79d997d6767cb006a15b12140bd51ce14a06454
ssdeep: 6144:gwZlfoZsms6ju31XP/t7PdUcrQ0OxJhQng0ECTXzh8x20:TZlfVa8tT9rBOxzQng0E+hm2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Generik.MQYAFAD also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Ursu.134432
ALYacGen:Variant.Ursu.134432
SangforTrojan.Win32.Generik.MQYAFAD
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderGen:Variant.Ursu.134432
Cybereasonmalicious.855a09
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.MQYAFAD
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
TencentWin32.Trojan.Generic.Pepn
Ad-AwareGen:Variant.Ursu.134432
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34266.vqW@aW6oqce
McAfee-GW-EditionBehavesLike.Win32.Trojan.fc
FireEyeGeneric.mg.b56bbe6855a09728
EmsisoftGen:Variant.Ursu.134432 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.bwehs
AviraTR/Dropper.MSIL.Gen2
Antiy-AVLTrojan/Generic.ASMalwS.23CDB2C
GDataGen:Variant.Ursu.134432
AhnLab-V3Trojan/Win.Generic.C4542845
McAfeeArtemis!B56BBE6855A0
MAXmalware (ai score=98)
MalwarebytesMachineLearning/Anomalous.95%
PandaTrj/GdSda.A
IkarusBackdoor.MSIL.Bladabindi
FortinetW32/Generic!tr
Paloaltogeneric.ml

How to remove Generik.MQYAFAD?

Generik.MQYAFAD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment