Mal/Generic-R + Mal/DownLdr-FL information

The Mal/Generic-R + Mal/DownLdr-FL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Mal/DownLdr-FL virus can do?

Authenticode signature is invalid

How to determine Mal/Generic-R + Mal/DownLdr-FL?


File Info:
name: 4620C0038EEB9F3687EB.mlw
path: /opt/CAPEv2/storage/binaries/481b203b24b14386012ed1ce357a6a27bab4fac848e083225819f9fea47513ea
crc32: 904F96C1
md5: 4620c0038eeb9f3687ebc380f10cead9
sha1: f73526e0226ce6d62d73388c69c1d644693d7a6c
sha256: 481b203b24b14386012ed1ce357a6a27bab4fac848e083225819f9fea47513ea
sha512: a8f42282190f887d6a208764887e97978e1fe4363c299a0eca2f3b903b9a0ae5f8d86428158dd3df312d5d53766c1c36ab10f9f801fee15cb7cc6491ee454586
ssdeep: 768:6XSLugbTdWlDUrRaTsNnTne5b2UNM9TZydalfuV3lVwzQ3Wz:6CLugvdZoSS5b20M9TOaFufVw0Gz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10E03E704B7EE4116D1FFEFF939FC955999F7EA622406F92B1440024B6D92E80CA4363B
sha3_384: 3bd3204f6af070731f18d075965be003613c6006d3c1e6970373f8cf901e85292ca80e45ae75a06ed63e97c5c717b874
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-09-13 18:33:47

Version Info:
Translation: 0x0000 0x04b0
Comments: CmRccService
FileDescription: CmRccService
FileVersion: 3.1.4.1
InternalName: yo5H3aTM0L6
LegalCopyright:  
OriginalFilename: yo5H3aTM0L6
ProductName: CmRccService
ProductVersion: 3.1.4.1
Assembly Version: 3.1.4.1

Mal/Generic-R + Mal/DownLdr-FL also known as:

Bkav	W32.AIDetectNet.01
Lionic	Heuristic.File.Generic.00×1!p
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.1575
MicroWorld-eScan	Gen:Trojan.Mardom.MN.11
FireEye	Generic.mg.4620c0038eeb9f36
ALYac	IL:Trojan.MSILZilla.23250
Cylance	Unsafe
VIPRE	Gen:Trojan.Mardom.MN.11
Sangfor	Trojan.Win32.Agent.Vb2c
K7AntiVirus	Trojan ( 005955001 )
Alibaba	Trojan:MSIL/MalwareX.0a702f0a
K7GW	Trojan ( 005955001 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34698.cm0@ayfkw0l
Cyren	W32/MSIL_Agent.DHY.gen!Eldorado
ESET-NOD32	a variant of MSIL/Agent.VIF
TrendMicro-HouseCall	TROJ_GEN.R03BC0RIT22
Paloalto	generic.ml
ClamAV	Win.Packed.Msilzilla-9953300-0
Kaspersky	VHO:Trojan.MSIL.Exnet.gen
BitDefender	Gen:Trojan.Mardom.MN.11
Avast	Win32:MalwareX-gen [Trj]
Tencent	Win32.Trojan.Agen.Cnhl
Ad-Aware	Gen:Trojan.Mardom.MN.11
Emsisoft	Gen:Trojan.Mardom.MN.11 (B)
TrendMicro	TROJ_GEN.R03BC0RIT22
McAfee-GW-Edition	BehavesLike.Win32.AdwareLinkury.nm
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-R + Mal/DownLdr-FL
SentinelOne	Static AI – Malicious PE
GData	Gen:Trojan.Mardom.MN.11
Google	Detected
Avira	HEUR/AGEN.1235639
MAX	malware (ai score=86)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Mardom.C5109384
Acronis	suspicious
McAfee	Artemis!4620C0038EEB
VBA32	OScope.Trojan.MSIL.Basic.8
Malwarebytes	Trojan.Crypt
APEX	Malicious
Rising	Trojan.Agent!8.B1E (CLOUD)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.VIF!tr
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.0226ce

How to remove Mal/Generic-R + Mal/DownLdr-FL?

Mal/Generic-R + Mal/DownLdr-FL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X