Malware

What is “Generik.MTNXWOM”?

Malware Removal

The Generik.MTNXWOM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.MTNXWOM virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Generik.MTNXWOM?


File Info:

crc32: CDA719FF
md5: 1a045a97c8dce858192bdba2ce4ea33c
name: 1A045A97C8DCE858192BDBA2CE4EA33C.mlw
sha1: d02cba98cc3b3d5babf2657ddbfafe640a854f86
sha256: 66f50006c6f49b8bba3a8c4ebfda31257d2f3350a69283c6a80b21956b960dbd
sha512: d1ef498b7a806793d37d9e0aa98ccff7135ffe2eaf284d4e3815b0f10c035c31a73b66c6ffb6c37a10cded76fcb8b17bf6a2204453996cee394b3728728da9e3
ssdeep: 12288:qA7m9E9Wltp7clCTo5CUz/HZx+1IJ1a3ns/07gciWGZ:eXtpuCEo+/2mOc/083W0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020 - 2021
Assembly Version: 1.0.0.0
InternalName: x643x57ce8x62cx628yx637Kx632x635.exe
FileVersion: 1.0.0.0
CompanyName: Scandals Inc.
LegalTrademarks:
Comments:
ProductName: Geometry Shapes
ProductVersion: 1.0.0.0
FileDescription: Geometry Shapes
OriginalFilename: x643x57ce8x62cx628yx637Kx632x635.exe

Generik.MTNXWOM also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Packed2.42850
MicroWorld-eScanTrojan.GenericKD.36400426
FireEyeGeneric.mg.1a045a97c8dce858
McAfeePWS-FCUF!1A045A97C8DC
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
SangforTrojan.Win32.Save.a
BitDefenderTrojan.GenericKD.36400426
CyrenW32/MSIL_Kryptik.DHF.gen!Eldorado
SymantecTrojan.Gen.2
AvastWin32:RATX-gen [Trj]
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaTrojan:Application/Generic.3169d1b3
ViRobotTrojan.Win32.Z.Packed2.626176
Ad-AwareTrojan.GenericKD.36400426
SophosMal/Generic-S
McAfee-GW-EditionPWS-FCUF!1A045A97C8DC
EmsisoftTrojan.GenericKD.36400426 (B)
IkarusWin32.SuspectCrc
WebrootW32.Malware.Gen
MAXmalware (ai score=82)
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/AgentTesla!ml
ArcabitTrojan.Generic.D22B6D2A
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataWin32.Trojan-Stealer.SnakeKeyLogger.YVPTSP
CynetMalicious (score: 100)
MalwarebytesTrojan.Crypt.MSIL
ESET-NOD32a variant of Generik.MTNXWOM
FortinetMalicious_Behavior.SB
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_70% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Generik.MTNXWOM?

Generik.MTNXWOM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment