Malware

Generik.WUXOFR removal guide

Malware Removal

The Generik.WUXOFR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generik.WUXOFR virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • A process created a hidden window
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Deletes its original binary from disk
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Attempts to modify proxy settings
  • Connects to Tor Hidden Services through a Tor gateway
  • Uses suspicious command line tools or Windows utilities

Related domains:

7tno4hib47vlep5o.tor2web.org

How to determine Generik.WUXOFR?


File Info:

crc32: 7888DFF7
md5: dade900951720381d466e60b61c556bd
name: DADE900951720381D466E60B61C556BD.mlw
sha1: 6afa3416ef80b96428184ba432f05c5fe8f2bb2e
sha256: 124132924fe376b4811bb3101dc62367949df57addbcf770ba6882aa523f4fd8
sha512: 340e48a587f511c83f231ccd42f06439e2c460e43d6752819686eace3b90420da23c3786854351a3918b4ef6b6e075fe23e834964bf2354c7ada4e34acba4dc1
ssdeep: 24576:POaCsQX3VY9LeM/wEOh4b9NK4j4SMmk/FBrqSUJyltZzsc5v/4aypPILR3nlvH5:2dpcVVR
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generik.WUXOFR also known as:

BkavW32.AIDetect.malware2
DrWebTrojan.PWS.Siggen1.30341
MicroWorld-eScanGen:Heur.Ransom.REntS.Gen.1
FireEyeGeneric.mg.dade900951720381
McAfeeArtemis!DADE90095172
BitDefenderGen:Heur.Ransom.REntS.Gen.1
K7GWTrojan ( 00536e511 )
K7AntiVirusTrojan ( 00536e511 )
BitDefenderThetaGen:NN.ZexaCO.34590.0nW@a8VPPFei
SymantecTrojan Horse
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan-Ransom.Win32.Bitman.adup
AlibabaRansom:Win32/Bitman.2a3fb610
NANO-AntivirusTrojan.Win32.Bitman.ffezjt
TencentWin32.Trojan.Bitman.Wvba
Ad-AwareGen:Heur.Ransom.REntS.Gen.1
EmsisoftGen:Heur.Ransom.REntS.Gen.1 (B)
ComodoMalware@#qpzojgy4131n
F-SecureTrojan.TR/TeslaCrypt.akxqr
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Downloader.tm
SophosMal/Generic-S
IkarusTrojan-Ransom.TeslaCrypt
AviraTR/TeslaCrypt.akxqr
MicrosoftRansom:Win32/Tescrypt.A
ArcabitTrojan.Ransom.REntS.Gen.1
AegisLabTrojan.Win32.Bitman.4!c
ZoneAlarmTrojan-Ransom.Win32.Bitman.adup
GDataGen:Heur.Ransom.REntS.Gen.1
CynetMalicious (score: 85)
VBA32TrojanRansom.Bitman
ALYacGen:Heur.Ransom.REntS.Gen.1
MalwarebytesRansom.TeslaCrypt
PandaTrj/GdSda.A
ESET-NOD32a variant of Generik.WUXOFR
RisingRansom.Tescrypt!8.3AF (CLOUD)
YandexTrojan.GenAsa!6EDAfs5wPGc
FortinetW32/Bitman.ADUP!tr
AVGWin32:Malware-gen
AvastWin32:Malware-gen

How to remove Generik.WUXOFR?

Generik.WUXOFR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment