Malware

About “Generik.UMNSCO” infection

Malware Removal

The Generik.UMNSCO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.UMNSCO virus can do?

  • The office file contains 4 macros
  • The office file contains a macro with auto execution
  • The office file contains a macro with suspicious strings

How to determine Generik.UMNSCO?


File Info:

crc32: E9A6A834
md5: c7c8b5f0465d4ed313dc92b30f56336d
name: upload_file
sha1: 410f4e48a7bcb3e6be7fadf442d272780d1847a4
sha256: c367a4f55aacfbcad5d8066dd4352e2101f983305fb525d008ff80a4fe2938c8
sha512: 56ad897d477d91d75f2d24ffc44353b47030bd5356e4cf4d308448953470e435b8cdbda5177c1e10d047c81ba0eee8456fd48b4e550618ff3d3f8a92c13083ab
ssdeep: 3072:fd7iFwjUliDjdvK5xgjUpRZ89B7WmW4pQDelNEjoqWUHIk/B3CyNtD:GwQliDjdOXpRq9B724pQ6jEXdok/lXD
type: Microsoft Word 2007+

Version Info:

0: [No Data]

Generik.UMNSCO also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.44012740
McAfeeW97M/Downloader.ddb
AegisLabTrojan.MSWord.Generic.4!c
BitDefenderTrojan.GenericKD.44012740
TrendMicroTrojan.W97M.POWLOAD.THJOHBO
CyrenPP97M/Agent.KC.gen!Eldorado
SymantecISB.Downloader!gen428
TrendMicro-HouseCallTrojan.W97M.POWLOAD.THJOHBO
AvastOther:Malware-gen [Trj]
KasperskyHEUR:Trojan.MSOffice.SAgent.gen
AlibabaTrojanDownloader:VBA/Obfuscation.A
NANO-AntivirusTrojan.Ole2.Vbs-heuristic.druvzi
Ad-AwareTrojan.GenericKD.44012740
EmsisoftTrojan.GenericKD.44012740 (B)
F-SecureMalware.VBA/Dldr.Agent.njzdc
McAfee-GW-EditionBehavesLike.Downloader.cc
FireEyeTrojan.GenericKD.44012740
IkarusTrojan-Downloader.VBA.Agent
AviraW97M/Dldr.Agent.jxpzv
MicrosoftTrojanDownloader:O97M/Obfuse.JM!MTB
ArcabitHEUR.VBA.CG.1
ZoneAlarmHEUR:Trojan.MSOffice.SAgent.gen
GDataMacro.Trojan.Agent.VJ6NRL
CynetMalicious (score: 85)
ALYacTrojan.Downloader.DOC.Gen
MAXmalware (ai score=85)
ZonerProbably Heur.W97Obfuscated
ESET-NOD32a variant of Generik.UMNSCO
SentinelOneDFI – Malicious OPENXML
FortinetVBA/Agent.UPE!tr
AVGOther:Malware-gen [Trj]
Qihoo-360virus.office.obfuscated.1

How to remove Generik.UMNSCO?

Generik.UMNSCO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment