Generik.NHFYWQM (file analysis)

The Generik.NHFYWQM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.NHFYWQM virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Dynamic (imported) function loading detected
• Authenticode signature is invalid
• A scripting utility was executed
• Uses Windows utilities for basic functionality
• Installs itself for autorun at Windows startup
• Binary compilation timestomping detected

How to determine Generik.NHFYWQM?

File Info:
name: 41F4D11BE827351DC3BF.mlw
path: /opt/CAPEv2/storage/binaries/94d4243a8e31420067477192bb50659ce1096db4062a92b108e8ae3164dcb535
crc32: 4B01BD07
md5: 41f4d11be827351dc3bfaf1e775b73e4
sha1: 19fd53bd7cbd94aae0ef2104303f33aee65467a9
sha256: 94d4243a8e31420067477192bb50659ce1096db4062a92b108e8ae3164dcb535
sha512: ec8c39a11048353fd8505ce14b4a5ed2cce5ff1a826cd6b1829a1eb0c49f76b3e645afb5c24f57ae1dc38461a07fbc6f989bfb271d996962cd55d1ad499dba19
ssdeep: 3072:7BtaM5EWCrATe1a5FdBEobGBNFAQ88wWkuVu:vaM5zRCQ
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1B7C31A1513F961AAF1F757749DF102539A32BCA16F3596AF228481BD0F326C0EA31B27
sha3_384: df9fde6259f6d3498b84399e0eaa44d9fe2599e8112f10d0d522a499537b26e6d599c7f7a4c264dbc262087f083fc20c
ep_bytes: 4883ec28e88b0700004883c428e90600
timestamp: 2057-03-05 18:58:45

Version Info:
CompanyName: N1tro4fun
FileDescription: Forkbomb                                           
FileVersion: 1.0
InternalName: when.the.impostor.is.sus                
LegalCopyright: Made by N1tro4fun. I'm not resposible for any damage.
OriginalFilename: ForkBomb.exe            
ProductName: ForkBomb
ProductVersion: 1.0
Translation: 0x0409 0x04b0

Generik.NHFYWQM also known as:

How to remove Generik.NHFYWQM?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.