Malware

Mal/Generic-R + Mal/Behav-035 removal guide

Malware Removal

The Mal/Generic-R + Mal/Behav-035 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-R + Mal/Behav-035 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine Mal/Generic-R + Mal/Behav-035?


File Info:

name: 4FEFEC88F6D30D068B22.mlw
path: /opt/CAPEv2/storage/binaries/b0b120c74254abec80143dfe059d83415e0ebf25bdc5deac76bd00d8387cd1fc
crc32: 9ADE3974
md5: 4fefec88f6d30d068b22eb2800091f5d
sha1: 15bf9db03e9304f99ef9f3a3e7a1dc29689726ac
sha256: b0b120c74254abec80143dfe059d83415e0ebf25bdc5deac76bd00d8387cd1fc
sha512: 7997300a9d832f873d871535b13182ac6312296fe34f188ca08da809020b41166146af73bf6603a75312ab49f2ff649015c4988ded4b365c62c1e37e86b9be3a
ssdeep: 12288:Pjc4Sco98ioJDGcFYcagrcksUGk5OM6DosDWs1IltpTyOrl+1sIOm+WuGMUvH0Fu:jLFF5C7d/yA/xcH6iOnDPJIoB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6D4F717FA64640CF41340B098A566765D2A6C3A248AAD0FF782BF4979356C3ACFC71F
sha3_384: 533d123ef550401f905a96f91c32aff422ac14cbc9cfa4d2c261c92caf7245494f67b03d7a1d819532ab1af16c7d1dc3
ep_bytes: 6820c24000e8f0ffffff000000000000
timestamp: 2006-08-08 18:14:17

Version Info:

Translation: 0x0409 0x04b0
Comments: Programa para gravação de conversas telefônicas no computador
CompanyName: Megatécnica Industrial
FileDescription: Arquivo executável do Pctel 6.0
LegalCopyright: Copyright (C) 2002-2004 Megatécnica Industrial Ltda
LegalTrademarks: Pctel é marca registrada da Megatécnica Industrial
ProductName: Pctel 6.0 - Gravador Telefônico Digital
FileVersion: 6.00.0402
ProductVersion: 6.00.0402
InternalName: svchost
OriginalFilename: svchost.exe

Mal/Generic-R + Mal/Behav-035 also known as:

CylanceUnsafe
SymantecTrojan.Gen
TrendMicro-HouseCallTROJ_SPNR.07CC13
AvastWin32:Malware-gen
TencentWin32.Trojan.Spnr.Piup
SophosMal/Generic-R + Mal/Behav-035
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_SPNR.07CC13
McAfee-GW-EditionBehavesLike.Win32.BadFile.jm
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!4FEFEC88F6D3
RisingTrojan.Win32.Generic.1601422C (C64:YzY0Oi+vUT5JWS8U)
IkarusTrojan.Generic27.KXC
FortinetW32/SPNR.07CC13!tr
AVGWin32:Malware-gen

How to remove Mal/Generic-R + Mal/Behav-035?

Mal/Generic-R + Mal/Behav-035 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment