Categories: Malware

What is “Generik.NLCMUQP”?

The Generik.NLCMUQP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.NLCMUQP virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Drops a binary and executes it
Unconventionial language used in binary resources: Spanish (Modern)
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

aZxQwRVuCbmSbKpv.aZxQwRVuCbmSbKpv

How to determine Generik.NLCMUQP?


File Info:
crc32: FEA3370Cmd5: 46d2462caf9f8cba3328d031ec15d2eename: 46D2462CAF9F8CBA3328D031EC15D2EE.mlwsha1: bb6cf69a635e3bcb8766ca415781ef3e10262194sha256: dd438a399ce03cbc2ae4e6487e2e420ea693030bdc1ec48d85bb20ff979c30e6sha512: d1834d00f80ab0588f3d114f1a2a418af01d7ccd0d30042f5f96eb1fdced451f18518b5baf3cdf67fdc9654cab3dfce27a4af162232830a2638ffbc812422314ssdeep: 24576:plNAU0XwDEUhFyl/2+G4aoJBt1qpjmzCPhleSZ0:RuwDEUKl/nGWzJ6H0type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: Nmqdvcr                FileVersion: 2.87.3684.61173 (sfimwpx_wsn.962605-0699)CompanyName: Microsoft CorporationProductName: Internet ExplorerProductVersion: 2.87.3684.61173FileDescription: Quc49 Setup Eeofxqeuxk                                           OriginalFilename: RUHRKPY.EXE            .CGKTranslation: 0x0409 0x04b0

Generik.NLCMUQP also known as:

DrWeb	Program.Unwanted.2520
MicroWorld-eScan	Trojan.GenericKD.45721440
FireEye	Trojan.GenericKD.45721440
CAT-QuickHeal	Trojan.Alien
Qihoo-360	Win32/Backdoor.Androm.HxQBQbcA
ALYac	Trojan.GenericKD.45721440
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Alien.vho
BitDefender	Trojan.GenericKD.45721440
Cyren	W32/Trojan.RZBI-8326
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Alien.vho
Alibaba	Backdoor:Win32/Androm.7f622982
NANO-Antivirus	Trojan.Win32.Alien.ilxjjr
ViRobot	Trojan.Win32.S.Agent.1056016
AegisLab	Trojan.Win32.Alien.4!c
Rising	Dropper.Certutil!1.D0D0 (CLASSIC)
Ad-Aware	Trojan.GenericKD.45721440
Emsisoft	Trojan.GenericKD.45721440 (B)
F-Secure	Backdoor.BDS/Androm.davdp
Zillya	Trojan.Alien.Win32.1799
TrendMicro	Ransom.Win32.CONTI.SMA.hp
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Avira	BDS/Androm.davdp
MAX	malware (ai score=88)
Antiy-AVL	Trojan[Spy]/MSIL.Quasar
Microsoft	Ransom:Win32/Conti
Arcabit	Trojan.Generic.D2B9A760
ZoneAlarm	HEUR:Trojan.Win32.Alien.vho
GData	Win32.Application.iObit.B
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Possible_smhpcontia.R366288
McAfee	Artemis!46D2462CAF9F
Malwarebytes	Backdoor.Andromeda
ESET-NOD32	a variant of Generik.NLCMUQP
TrendMicro-HouseCall	Ransom.Win32.CONTI.SMA.hp
Tencent	Win32.Trojan.Falsesign.Pezq
Ikarus	Malware.Win32.AVEvader
eGambit	PE.Heur.InvalidSig
Fortinet	Riskware/Androm
AVG	Win32:Malware-gen
Paloalto	generic.ml
MaxSecure	Trojan.Malware.74662763.susgen