Malware

About “Generik.NWRAYQL” infection

Malware Removal

The Generik.NWRAYQL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generik.NWRAYQL virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Generik.NWRAYQL?



File Info:

name: DEDB019BA27751DF7D3D.mlw
path: /opt/CAPEv2/storage/binaries/f8098b35b26e23a11313314fc4103fde8d3ab9807323890f8499ceda1a28697b
crc32: 1C07381C
md5: dedb019ba27751df7d3d93cbdd4577ae
sha1: 793de490c710a08979aab7a6646a086bdd25428d
sha256: f8098b35b26e23a11313314fc4103fde8d3ab9807323890f8499ceda1a28697b
sha512: 19b34f7b379ed7363203e98f1159804f2eb40fa079731d2734974ae5b6a746d6f51e8a32ba103f9e844c352bce0ba536bc9c11f153821f2677526b759352d0a9
ssdeep: 98304:fZW2JdXN0B7+sIOgEsNi9XwgwfoFhv7St8DF:hxzi9XwgwAHvU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15F267B223AFED236DD7292709F7D92A491617C705AF5C11B33903B2DD972188A92F723
sha3_384: cf622abc87b744e6accb47d37b9952f93eda0e3907cb899e2a03353acd9aff09f00a01376d4377509844dd1d64f7a0b7
ep_bytes: 558becb82c150000e88a030000535657
timestamp: 2001-07-19 22:01:47


Version Info:

CompanyName: Microsoft Corporation
FileDescription: msn
FileVersion: 6.10.0016.1624
InternalName: msn
LegalCopyright: Copyright (C) Microsoft Corp. 1981-2000
OriginalFilename: msn.exe
ProductName: Microsoft(R) MSN (R) Communications System
ProductVersion: 6.10.0016.1624
Built by: msnbld
Translation: 0x0409 0x04b0

Generik.NWRAYQL also known as:

BkavW32.AIDetect.malware2
LionicWorm.Win32.AutoRun.o!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.80714
FireEyeGeneric.mg.dedb019ba27751df
CAT-QuickHealWorm.AutoRun
McAfeeArtemis!DEDB019BA277
CylanceUnsafe
SangforVirus.Win32.Save.a
K7AntiVirusRiskware ( 0040eff71 )
AlibabaWorm:Win32/AutoRun.4b7b4ffc
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.ba2775
BaiduWin32.Trojan.VB.t
VirITBackdoor.Win32.Darkshell.JM
CyrenW32/Pajetbin.K.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.NWRAYQL
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Bulz-9871427-0
KasperskyWorm.Win32.AutoRun.vx
BitDefenderTrojan.GenericKDZ.80714
NANO-AntivirusTrojan.Win32.AutoRun.iwqnep
AvastWin32:VB-FBX
EmsisoftTrojan.GenericKDZ.80714 (B)
DrWebWin32.HLLW.Autoruner.547
McAfee-GW-EditionBehavesLike.Win32.Virut.rm
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.5ZQRW6
JiangminPacked.Krap.gvuf
AviraTR/Dropper.Gen
ArcabitTrojan.Generic.D13B4A
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
ALYacTrojan.GenericKDZ.80714
MAXmalware (ai score=87)
MalwarebytesMalware.AI.2797890020
TrendMicro-HouseCallTROJ_GEN.R03BH0CA422
RisingWorm.VB!1.DA3E (CLOUD)
IkarusTrojan.Win32.Vindor
FortinetW32/Pajetbin.K!tr
BitDefenderThetaGen:NN.ZexaF.34114.@p3@aS2w!nbi
AVGWin32:VB-FBX
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Generik.NWRAYQL?

Generik.NWRAYQL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment