Categories: Malware

Generik.NETSKWR malicious file

The Generik.NETSKWR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.NETSKWR virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Generik.NETSKWR?


File Info:
name: 12B2DC06BF38DAEEA565.mlwpath: /opt/CAPEv2/storage/binaries/79f59113d0e26c12e7d42e0467f783a9803fb3f04d7f5803453167979c76e549crc32: 94A9E0DCmd5: 12b2dc06bf38daeea565a9a61182ae2dsha1: 6006bd42aaf5156933751aebbe2f916873355d7csha256: 79f59113d0e26c12e7d42e0467f783a9803fb3f04d7f5803453167979c76e549sha512: 9d1ddb60e9a82321332f0e7ec2f4623f22bf6e5304a91d10ae525bb5f7e624b3a5b8d3d2b8a18da2e63cefa1b63038d397a7e691af8589b2ce7331fd236475eassdeep: 1536:4xZl6W1vquyb4Znouy8yB3qCZQX2oooD+AyxArXIVJ9K:4xZl6W1vqTwoutyBaIQXMmXIMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17B639D539B494A8BD879023028D7DB071932DCA8CC94C6B3C8D8BD671E77BAE553E311sha3_384: 7f6cd9ed6dca11e665d69e4fcb518a046a31a28750f8c975443727c469d66b1c531b6775aa3fe141bf8626071cd0cb0fep_bytes: 60be004041008dbe00d0feff5789e58dtimestamp: 2014-09-09 01:07:57
Version Info:
Comments: CompanyName: FileDescription: Microsoft(R) Windows(R) Operating SystemFileVersion: 6, 0, 2900, 5512InternalName: LegalCopyright: 版权所有 (C) 2013LegalTrademarks: OriginalFilename: PrivateBuild: ProductName: Microsoft ProductVersion: 6.00.2900.5512SpecialBuild: Translation: 0x0804 0x04b0

Generik.NETSKWR also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent2.m2HQ
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Trojan.Heur.em0@!@LFN3jb
FireEye	Generic.mg.12b2dc06bf38daee
McAfee	GenericRXEY-BF!12B2DC06BF38
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Packed:Win32/Generic.8940e0ad
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	AI:Packer.C96FDD351C
Cyren	W32/Trojan-Gypikon-based.BA!Max
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.NETSKWR
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Packed.Win32.Gena.b
BitDefender	Gen:Trojan.Heur.em0@!@LFN3jb
NANO-Antivirus	Trojan.Win32.PolyCrypt.dpmiea
Avast	Win32:TrojanX-gen [Trj]
Rising	PUA.Gena!8.13614 (CLOUD)
Emsisoft	Gen:Trojan.Heur.em0@!@LFN3jb (B)
Baidu	Win32.Trojan.Kryptik.gp
F-Secure	Trojan.TR/Crypt.ULPM.Gen
VIPRE	Gen:Trojan.Heur.em0@!@LFN3jb
TrendMicro	TROJ_GEN.R002C0PEL23
McAfee-GW-Edition	GenericRXEY-BF!12B2DC06BF38
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Gen:Trojan.Heur.em0@!@LFN3jb
Avira	TR/Crypt.ULPM.Gen
Antiy-AVL	Trojan[Packed]/Win32.Gena.b
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Heur.EC62C3
ViRobot	Trojan.Win.Z.Gena.72192
ZoneAlarm	Packed.Win32.Gena.b
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Trojan/Win.1Table.R502303
ALYac	Gen:Trojan.Heur.em0@!@LFN3jb
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.367812539
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0PEL23
Tencent	Win32.Packed.Gena.Rqil
Ikarus	Trojan.Win32.Agent2
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.6bf38d
DeepInstinct	MALICIOUS