Malware

Generik.MRADJCQ removal instruction

Malware Removal

The Generik.MRADJCQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.MRADJCQ virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.MRADJCQ?


File Info:

crc32: CC02DAA2
md5: 3cb897ca05c3fd89587b17595d902ca8
name: 3CB897CA05C3FD89587B17595D902CA8.mlw
sha1: 1a0f1e71cfb5f08244384fafc5a17be17fa708e9
sha256: 3ce969a94f4bc8dec526e3551626d7e3639bae986304deba85e8f29f039fe345
sha512: 936f2c6d816cc6740b2f3fc0e7a67086ebc9db7d6e1c26a917d7628921e2487c981bac94c0154a06c7de1eedf8529e9d15840987b43bfaaeca3eeb55aa44bff1
ssdeep: 3072:kvhsCTxQxsD+GN4qbhfmC3eDU2gqfjC8MzfyRLZ+EyFZvG9UWc3hp:kvhsC1Qc+GTtmC3eDvTfjszfyRLby7eK
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generik.MRADJCQ also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Jaik.42665
FireEyeGeneric.mg.3cb897ca05c3fd89
McAfeeArtemis!3CB897CA05C3
CylanceUnsafe
VIPREVirTool.Win32.Obfuscator.da!k (v)
BitDefenderThetaGen:NN.ZexaCO.34700.kuZ@aWJE49gi
CyrenW32/Kryptik.CTB.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
KasperskyUDS:DangerousObject.Multi.Generic
NANO-AntivirusVirus.Win32.Gen.ccmw
Ad-AwareGen:Variant.Jaik.42665
F-SecureTrojan.TR/ATRAPS.Gen
McAfee-GW-EditionBehavesLike.Win32.Wabot.cc
EmsisoftGen:Variant.Jaik.42665 (B)
IkarusTrojan.Inject
AviraTR/ATRAPS.Gen
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataGen:Variant.Jaik.42665
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Formbook.C4284007
MAXmalware (ai score=87)
MalwarebytesSpyware.TelegramBot.TOR.Generic
ESET-NOD32a variant of Generik.MRADJCQ
TrendMicro-HouseCallTROJ_GEN.F0D1C00LU20
SentinelOneStatic AI – Malicious PE
FortinetW32/Kryptik.HIIG!tr
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (D)

How to remove Generik.MRADJCQ?

Generik.MRADJCQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment