Categories: Malware

Generik.NONYYIS removal

The Generik.NONYYIS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.NONYYIS virus can do?

Injection (inter-process)
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
A potential decoy document was displayed to the user
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to interact with an Alternate Data Stream (ADS)
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

nodejs.org

How to determine Generik.NONYYIS?


File Info:
crc32: 640935DBmd5: b0bba84c50dc46946a130bdfdef2983bname: upload_filesha1: 2c687d52cc76990c08ec8638399f912df8fb72desha256: e7d2deba4fccbea79ffa209ebe0ce49f98aecfb340c8d6ec3ea1773cb12cb07esha512: 621b05ac9aeff842d9a320ee191b6ab6de040a1453df814bc323673796754684c1ea4da1c573751fa7cc22aa5d8db0506e7b05a04fbb5be70e5ed21809a5cff8ssdeep: 12288:LCp0jH/Op7j0hxSSJPBS27lGm4sxIHXC6Pu1LoGHFCZRlIzF/+WWPFDpI3:LCp0jfON0KSJPBpBx3qHXC6Pu1EGHFCYtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Generik.NONYYIS also known as:

DrWeb	JS.Siggen5.40263
MicroWorld-eScan	Trojan.GenericKD.34361196
Qihoo-360	Win32/Trojan.815
ALYac	Trojan.Torjok.gen
Cylance	Unsafe
AegisLab	Trojan.Win32.TorJok.4!c
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.34361196
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_60% (W)
Invincea	heuristic
Cyren	W32/Trojan.XCDB-6041
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.NONYYIS
TrendMicro-HouseCall	TrojanSpy.Win32.ANDROM.USXVPHH20
Kaspersky	Trojan.Win32.TorJok.lt
Alibaba	Trojan:Win32/TorJok.f914d9c0
Rising	Trojan.ScriptRunner!1.CA86 (CLASSIC)
Ad-Aware	Trojan.GenericKD.34361196
Emsisoft	Trojan.GenericKD.34361196 (B)
Comodo	TrojWare.Win32.Agent.xnzsg@0
F-Secure	Trojan.TR/Torjok.sfpjv
TrendMicro	TrojanSpy.Win32.ANDROM.USXVPHH20
FireEye	Trojan.GenericKD.34361196
Sophos	Mal/Generic-S
Ikarus	Trojan.Script
Avira	TR/Torjok.sfpjv
Microsoft	Trojan:Win32/Ymacco.AAE7
Arcabit	Trojan.Generic.D20C4F6C
ZoneAlarm	Trojan.Win32.TorJok.lt
GData	Trojan.GenericKD.34361196
Cynet	Malicious (score: 85)
McAfee	Artemis!B0BBA84C50DC
MAX	malware (ai score=99)
Panda	Trj/CI.A
APEX	Malicious
Fortinet	W32/TorJok.LT!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
MaxSecure	Trojan.Malware.73974834.susgen