Malware

Generik.MZQYJOS removal tips

Malware Removal

The Generik.MZQYJOS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.MZQYJOS virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Generik.MZQYJOS?


File Info:

crc32: C57262D0
md5: ac7ebe863e18d23aaa980bb02bade3b3
name: AC7EBE863E18D23AAA980BB02BADE3B3.mlw
sha1: ae4f6f563906a281481ef356dfdc9addb43b8aed
sha256: 32d2ad43688ec3e5e22e800dbf5da69a2bc837fbb55ee4c034ecc68f34823da9
sha512: 9efe312ab538359b3f8059a5f2a18d56ce1ed8ba0d8ab3dbc6d2c5a48159d4a7357b1b1720138fd1e77ea36c6af2bb4dca5ac90dbdc1dad4282223ec2a085680
ssdeep: 6144:RlA0vg1gDrKDAAdxqFHBspH52avQmQy6y:RlASGDAPFgYvy
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2013 Nero AG and its licensors
InternalName: NeroDisc
FileVersion: 15,0,25,0
CompanyName: Nero AG
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: NeroDiscMergeWrongDisc
SpecialBuild: 15,0,25,0
ProductVersion: 15,0,25,0
FileDescription: NeroDiscMergeWrongDisc Application
OriginalFilename: NeroDiscMergeWrongDisc.exe
Translation: 0x0409 0x04e4

Generik.MZQYJOS also known as:

K7AntiVirusTrojan ( 0051e08e1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.16028
CynetMalicious (score: 99)
CAT-QuickHealDownldr.Freepds.MUE.ZZ5
ALYacGen:Variant.Zusy.320442
CylanceUnsafe
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaRansom:Win32/Tovicrypt.4b2b7c4c
K7GWTrojan ( 0051e08e1 )
Cybereasonmalicious.63e18d
CyrenW32/S-2af32512!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.MZQYJOS
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zusy.320442
NANO-AntivirusTrojan.Win32.Encoder.evjjqy
MicroWorld-eScanGen:Variant.Zusy.320442
TencentWin32.Trojan.Generic.Loru
Ad-AwareGen:Variant.Zusy.320442
SophosML/PE-A + Mal/Swizzor-D
ComodoMalware@#2ahzaukztbgtn
BitDefenderThetaGen:NN.ZexaF.34110.vy0@aeR3R!yi
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Crypmic-1
McAfee-GW-EditionRansomware-GJA!AC7EBE863E18
FireEyeGeneric.mg.ac7ebe863e18d23a
EmsisoftGen:Variant.Zusy.320442 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1110705
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.22CBA76
MicrosoftRansom:Win32/Tovicrypt.A
ArcabitTrojan.Zusy.D4E3BA
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Zusy.320442
Acronissuspicious
McAfeeRansomware-GJA!AC7EBE863E18
MAXmalware (ai score=100)
VBA32BScope.Trojan.Bagsu
MalwarebytesMalware.AI.2451378745
PandaTrj/GdSda.A
TrendMicro-HouseCallMal_Crypmic-1
RisingTrojan.Generic@ML.100 (RDML:ANqkD7u7kPStbwT83fXmag)
YandexTrojan.GenAsa!/Jktgqz9N7U
IkarusTrojan-Ransom.Locky
FortinetW32/Kryptik.FNZR!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generik.MZQYJOS?

Generik.MZQYJOS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment