How to remove “Mal/Generic-R + Troj/MSIL-HVU”?

The Mal/Generic-R + Troj/MSIL-HVU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Troj/MSIL-HVU virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs
Creates a copy of itself

How to determine Mal/Generic-R + Troj/MSIL-HVU?


File Info:
crc32: 7FA0B736
md5: ef855511e15c2e4175b1a574a45c23f0
name: EF855511E15C2E4175B1A574A45C23F0.mlw
sha1: 54dc6efd05b9a7974eca5853575c01748ef38be3
sha256: 20648eadd69d88363650995e91d62aa875a0ff5297eba1f6ce88258491bdbbf1
sha512: 0d700a12ce168d65fe1ad0940201df0594c8cf2c41208fbab914ee8573bb4d321326a69db23a54261e43823e78664c1eb322cb791957415d029269a507c33bc6
ssdeep: 1536:Itg6YSbz8Wu6WhA7cQ5wMg2hBjsVu1gdoCa+iSh/H1Dp:brSXU6z7xg2U2R+iS1H7
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: WindowsApplication1.exe
FileVersion: 1.0.0.0
ProductName: WindowsApplication1
ProductVersion: 1.0.0.0
FileDescription: WindowsApplication1
OriginalFilename: WindowsApplication1.exe

Mal/Generic-R + Troj/MSIL-HVU also known as:

K7AntiVirus	Trojan ( 004b6e9a1 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader12.19594
Cynet	Malicious (score: 99)
CAT-QuickHeal	Backdoor.Fynloski.A3
ALYac	Gen:MSIL.Heur2.Lagos.2
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.1390863
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 004b6e9a1 )
Cybereason	malicious.1e15c2
Symantec	Backdoor.Ratenjay
ESET-NOD32	a variant of MSIL/Kryptik.BEW
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packed.Ursu-8015308-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:MSIL.Heur2.Lagos.2
NANO-Antivirus	Trojan.Win32.Kryptik.ewfwib
MicroWorld-eScan	Gen:MSIL.Heur2.Lagos.2
Tencent	Win32.Trojan.Generic.Anzh
Ad-Aware	Gen:MSIL.Heur2.Lagos.2
Sophos	Mal/Generic-R + Troj/MSIL-HVU
Comodo	Backdoor.MSIL.Bladabindi.ABC@6b1idd
BitDefenderTheta	AI:Packer.7C22A1A21F
McAfee-GW-Edition	Generic.drd
FireEye	Generic.mg.ef855511e15c2e41
Emsisoft	Gen:MSIL.Heur2.Lagos.2 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1108900
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.253385F
Microsoft	Backdoor:MSIL/Bladabindi.AJ
GData	Gen:MSIL.Heur2.Lagos.2
McAfee	Generic.drd
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.4052201050
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!mv0KcPVKsds
Ikarus	Backdoor.MSIL.Bladabindi
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	MSIL/Kryptik.BDI!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Mal/Generic-R + Troj/MSIL-HVU?

Mal/Generic-R + Troj/MSIL-HVU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X