About “Mal/Generic-R + Mal/Scribble-D” infection

The Mal/Generic-R + Mal/Scribble-D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Mal/Scribble-D virus can do?

Authenticode signature is invalid

How to determine Mal/Generic-R + Mal/Scribble-D?


File Info:
name: EA40734DDAE1032882E4.mlw
path: /opt/CAPEv2/storage/binaries/259ebde5c6a87bfc2726c197dfe7d631a3d8782fde3f8df05212bb121116b903
crc32: A8C52DE0
md5: ea40734ddae1032882e4c12659540ab8
sha1: 91b5c35ab15f32c2b717f70092569ee57cb1fd17
sha256: 259ebde5c6a87bfc2726c197dfe7d631a3d8782fde3f8df05212bb121116b903
sha512: d6295b956cc056723a500be3d304fe68dc7d4967d7638ff4ef001cdc0f03d1b82ac609996ddf70ac8a960d4883db8ac28622e9c50cadbfe43af796d0a771ba76
ssdeep: 1536:aIvRkRp6yNVvCo2ki7N9wuEG99+E2bh3GFsbTfm:aIvRk6yNVvCo2ki7N9wuEk9+E2bgFsbS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14C731B01B7C5F478F07269317BB963328575BC322C1AE30E7394D96A2EB0994E635B17
sha3_384: 4e48144d6a1128a9e49250e4a94ae0a3ebae6ed409d76449e52e8d862ec77ba17ca8665a16687994114de1eef8ec88bf
ep_bytes: e8f2e9ffff6a5868e83e0001e8cbdfff
timestamp: 2010-11-20 09:20:04

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Windows® installer
FileVersion: 5.0.7601.17514 (win7sp1_rtm.101119-1850)
InternalName: msiexec
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: msiexec.exe
ProductName: Windows Installer - Unicode
ProductVersion: 5.0.7601.17514
Translation: 0x0409 0x04b0

Mal/Generic-R + Mal/Scribble-D also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Win32.Virtob.Gen.12.Dam
FireEye	Generic.mg.ea40734ddae10328
CAT-QuickHeal	W32.Virut.G
Sangfor	Trojan.Win32.Save.a
BitDefender	Win32.Virtob.Gen.12.Dam
Cybereason	malicious.ddae10
BitDefenderTheta	AI:FileInfector.C2A5779617
Cyren	W32/S-eec214f2!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Rising	Malware.Heuristic!ET#90% (RDMK:cmRtazohlQiZRronmSvAGyTF6N8A)
Ad-Aware	Win32.Virtob.Gen.12.Dam
Sophos	Mal/Generic-R + Mal/Scribble-D
TrendMicro	PE_VIRUX.GEN-4
McAfee-GW-Edition	BehavesLike.Win32.Virut.lm
Emsisoft	Win32.Virtob.Gen.12.Dam (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Ren.Gen
MAX	malware (ai score=85)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Win32.Virtob.Gen.12.Dam
GData	Win32.Virtob.Gen.12.Dam
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!EA40734DDAE1
Cylance	Unsafe
TrendMicro-HouseCall	PE_VIRUX.GEN-4
Tencent	Virus.Win32.Virut.CE.200087
Ikarus	Trojan.Patched
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.19DB6!tr
AVG	Win32:Evo-gen [Susp]
Avast	Win32:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Mal/Generic-R + Mal/Scribble-D?

Mal/Generic-R + Mal/Scribble-D removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X