Malware

Generik.MTQHECS malicious file

Malware Removal

The Generik.MTQHECS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.MTQHECS virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generik.MTQHECS?


File Info:

crc32: 4210065E
md5: 741501341f3e0d4103641afe603ef103
name: ztx777.exe
sha1: 9af642923de1f2bfc1fc00cf0d0ca9a0a4fc0b3f
sha256: 54cbbdb5e6b3875ea9da9074d22321a1e60cba97a16ba58891e48d19a8c2f4ea
sha512: 09a75f11902359a0a27fc72f598a2ba8753b1921a1b590c0b8e4f4a3f1a72df5f4849705a248b1b7d8a3191d3ecd8cfb7ee985ba2e6fa6d16024344ea1b60a1d
ssdeep: 6144:BHA6huurX4+yuxDFNjIAKoE4+BXvJVd+VCYgiC:BgY3T4UxDFZIQEh+VAiC
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Hyperionics Technology LLC 2006-2014 (c)
FileVersion: 7.2.8.9
CompanyName: Hyperionics Technology LLC
ProductName: Buzzing Thertable
ProductVersion: 7.2.8.9
FileDescription: Timeoffset Finish Throw Namestringthe
Translation: 0x0409 0x04b0

Generik.MTQHECS also known as:

MicroWorld-eScanTrojan.GenericKD.32812283
FireEyeGeneric.mg.741501341f3e0d41
McAfeeRDN/Ransom
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderTrojan.GenericKD.32812283
CrowdStrikewin/malicious_confidence_80% (W)
TrendMicroRansom_HPLOCKY.SME1
SymantecML.Attribute.HighConfidence
APEXMalicious
GDataTrojan.GenericKD.32812283
KasperskyTrojan-Proxy.Win32.Sybici.ig
RisingTrojan.Generic@ML.90 (RDML:6L2/L74tbfsE2e1w7WaYlQ)
Endgamemalicious (moderate confidence)
SophosMal/Generic-S
F-SecureTrojan.TR/AD.Coroxy.vpkof
DrWebTrojan.Spynet.32
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Injector.dc
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.GenericKD.32812283 (B)
IkarusTrojan.SuspectCRC
CyrenW32/Trojan.HVNO-5605
AviraTR/AD.Coroxy.vpkof
MAXmalware (ai score=87)
ArcabitTrojan.Generic.D1F4ACFB
ZoneAlarmTrojan-Proxy.Win32.Sybici.ig
MicrosoftTrojan:Win32/Occamy.C
Ad-AwareTrojan.GenericKD.32812283
PandaTrj/CI.A
ESET-NOD32a variant of Generik.MTQHECS
TrendMicro-HouseCallRansom_HPLOCKY.SME1
FortinetW32/Kryptik.GVSM!tr
AVGFileRepMalware
Cybereasonmalicious.23de1f
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.610

How to remove Generik.MTQHECS?

Generik.MTQHECS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment