Generik.ORSPZA (file analysis)

The Generik.ORSPZA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.ORSPZA virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Generik.ORSPZA?


File Info:
crc32: 90653AA3
md5: 68580e6cc22a8ac8a184caa7ea16a6bf
name: 68580E6CC22A8AC8A184CAA7EA16A6BF.mlw
sha1: 5c66c32f03101218bd0e5544ca1831b35acfea8b
sha256: 3fd8fb8465bb449ce51c6b6074107358461d1fc008dc903771f528244c9b8fa8
sha512: b772f9d27f6748e6dbd962b661c9b05a7d723f82781433785ad14999d083e5094c6ea12218845e047c5705777c7faefaee094e4640eedc0dfe484fd2ecc38656
ssdeep: 24576:UqW1uw8NWxqbqo/pgylHQikRvX/CfNkT:BEuwDQbUylHnkRvPC
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.0.0
InternalName: CoderVir Stealer Love Lolz.guru.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: CoderVir Stealer Love Lolz.guru.exe

Generik.ORSPZA also known as:

MicroWorld-eScan	Trojan.GenericKD.45772124
FireEye	Generic.mg.68580e6cc22a8ac8
ALYac	Trojan.GenericKD.45772124
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.45772124
Cybereason	malicious.f03101
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win64:Malware-gen
Kaspersky	HEUR:Trojan-PSW.MSIL.Coins.gen
Alibaba	TrojanPSW:MSIL/Coins.b5571bac
AegisLab	Trojan.Win32.Generic.4!c
Ad-Aware	Trojan.GenericKD.45772124
Emsisoft	Trojan.GenericKD.45772124 (B)
F-Secure	Heuristic.HEUR/AGEN.1140440
DrWeb	Trojan.PWS.Siggen2.61703
McAfee-GW-Edition	BehavesLike.Win64.VirRansom.bc
Sophos	ML/PE-A
Ikarus	Trojan.SuspectCRC
Avira	HEUR/AGEN.1140440
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Wacatac.D3!ml
Gridinsoft	Ransom.Win64.Wacatac.sa
Arcabit	Trojan.Generic.D2BA6D5C
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Coins.gen
GData	Win64.Trojan.Agent.LKRI77
Cynet	Malicious (score: 100)
McAfee	Artemis!68580E6CC22A
Malwarebytes	Spyware.PasswordStealer
ESET-NOD32	a variant of Generik.ORSPZA
Tencent	Msil.Trojan-qqpass.Qqrob.Woqa
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	PossibleThreat
AVG	Win64:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Generik.ORSPZA?

Generik.ORSPZA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X