Categories: Malware

About “GenScript.KLB” infection

The GenScript.KLB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What GenScript.KLB virus can do?

  • Injection (inter-process)
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • A potential decoy document was displayed to the user
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine GenScript.KLB?


File Info:

crc32: 45AE0F0Bmd5: 520c6c2d15d6439bf5bcf95b708accd7name: upload_filesha1: 97da807f1b529e9bb78835713e8aeabe813cd98dsha256: f41e1405b2d7c19b814170232d477a3bacfedada428b26a6aa4f2ef1830f5befsha512: d89598d4aa89626ac2abb5106b2b055cdb0c1a0a4145a1b50ab7e0913de5af4b90ada923b4a6fea79b3eb6a7b0863e1e030a05a95387fe27a6c78304b05836f5ssdeep: 6144:ck3hOdsylKlgryzc4bNhZF+E+W2knXPJVbTc0i+VLvuD+ktU5ljqv2tyl0dJdpa:v1Q+mOxbtyaPdpC0ccnXwtype: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: Dell, Last Saved By: Dell, Create Time/Date: Wed Oct 14 10:36:37 2020, Last Saved Time/Date: Wed Oct 14 10:36:37 2020, Security: 0

Version Info:

0: [No Data]

GenScript.KLB also known as:

Elastic malicious (high confidence)
DrWeb Exploit.Siggen2.48681
MicroWorld-eScan Trojan.GenericKD.44070939
CAT-QuickHeal XMLS.VBAPurging.38956
AegisLab Trojan.Script.Generic.a!c
Arcabit HEUR.VBA.CG.1
Cyren X97M/Agent.HR
Symantec W97M.Downloader
TrendMicro-HouseCall TROJ_FRS.VSNTJE20
Kaspersky HEUR:Trojan-Downloader.Script.Generic
BitDefender Trojan.GenericKD.44070939
Ad-Aware Trojan.GenericKD.44070939
TrendMicro TROJ_FRS.VSNTJE20
McAfee-GW-Edition BehavesLike.OLE2.Downloader.fb
FireEye Trojan.GenericKD.44070939
Emsisoft Trojan.GenericKD.44070939 (B)
ZoneAlarm HEUR:Trojan-Downloader.Script.Generic
GData Trojan.GenericKD.44070939
ALYac Trojan.GenericKD.44070939
TACHYON Trojan/XF.PS.Gen
Zoner Probably Heur.W97ShellB
ESET-NOD32 GenScript.KLB
Ikarus Win32.SuspectCrc
Fortinet VBA/Agent.BLX!tr.dldr
Qihoo-360 Generic/Trojan.Downloader.251

How to remove GenScript.KLB?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Application.Bundler.DomaIQ.Q (B) removal guide

The Application.Bundler.DomaIQ.Q (B) is considered dangerous by lots of security experts. When this infection is…

56 mins ago

Jatif.4890 information

The Jatif.4890 is considered dangerous by lots of security experts. When this infection is active,…

56 mins ago

Midie.127575 removal

The Midie.127575 is considered dangerous by lots of security experts. When this infection is active,…

56 mins ago

Malware.AI.1974689421 malicious file

The Malware.AI.1974689421 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Generic.Dacic.94CCEEA9.A.32453306 (file analysis)

The Generic.Dacic.94CCEEA9.A.32453306 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Fugrafa.312973 information

The Fugrafa.312973 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago