About “Mal/Generic-R + Troj/AutoG-KJ” infection

The Mal/Generic-R + Troj/AutoG-KJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Troj/AutoG-KJ virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Mal/Generic-R + Troj/AutoG-KJ?


File Info:
name: 3368F6BA49C2FEE5B235.mlw
path: /opt/CAPEv2/storage/binaries/cfa8dc6605736e78fdef5ee5a933032f03e2dbae9b9c9c32e864531f691e5f91
crc32: 6DD7BF04
md5: 3368f6ba49c2fee5b235b9f26d39eecf
sha1: 8278387f942b9fd9dfc923bb333f1315b365c11a
sha256: cfa8dc6605736e78fdef5ee5a933032f03e2dbae9b9c9c32e864531f691e5f91
sha512: f06f9329812f323c05c1c97dc9ad93bedd4b0a9e2e29208515a50e2f778611f9a37acd6c13c01a3eb7d6b1e653b8f3326aa7da99a96a4f29a5214d02c579d202
ssdeep: 98304:aDdhki2tfkJvBDtzke/eEbWi1hKeZhkBhu:6dvskHtzkeGEAeZaLu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D20633167297D933E99604761991FA25867E78B10B28EFC7B3C04AF94F227C5DB302C9
sha3_384: 8eb07a2e8816705114687b49ab8d454dadafb438e02d6a3ac72b4e493e8ea4d4e04d579db524ed0961384f0c1e6a953e
ep_bytes: e8e38c0000e978feffff8bff558bec81
timestamp: 2020-05-31 01:09:17

Version Info:
0: [No Data]

Mal/Generic-R + Troj/AutoG-KJ also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Mint.Dreidel.ZtW@xSotySei
CAT-QuickHeal	Trojan.AgentbRI.S17487120
McAfee	Lockbit-FSUC!3368F6BA49C2
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00573d0d1 )
Alibaba	Trojan:Win32/Kryptik.3faa159c
K7GW	Trojan ( 00573d0d1 )
Cybereason	malicious.a49c2f
Cyren	W32/Kryptik.COL.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Kryptik.HHTW
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Heur.Mint.Dreidel.ZtW@xSotySei
NANO-Antivirus	Trojan.Win32.GoCloudnet.idrdyy
Ad-Aware	Gen:Heur.Mint.Dreidel.ZtW@xSotySei
Emsisoft	Gen:Heur.Mint.Dreidel.ZtW@xSotySei (B)
DrWeb	Trojan.Siggen11.49623
Zillya	Trojan.Agent.Win32.1589262
TrendMicro	Backdoor.Win32.GLUPTEBA.SMTH.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
FireEye	Generic.mg.3368f6ba49c2fee5
Sophos	Mal/Generic-R + Troj/AutoG-KJ
SentinelOne	Static AI – Malicious PE
GData	Gen:Heur.Mint.Dreidel.ZtW@xSotySei
Jiangmin	Trojan.Agentb.iae
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.31081FD
Gridinsoft	Ransom.Win32.AzorUlt.sa
Arcabit	Trojan.Mint.Dreidel.E29A23
Microsoft	Trojan:Win32/Glupteba.OI!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R357717
VBA32	BScope.Trojan.Azorult
ALYac	Gen:Heur.Mint.Dreidel.ZtW@xSotySei
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.4045066455
TrendMicro-HouseCall	Backdoor.Win32.GLUPTEBA.SMTH.hp
Rising	Trojan.Kryptik!1.CF98 (CLOUD)
Yandex	Trojan.Kryptik!0HHNyqDSrrI
Ikarus	Trojan.Win32.Ranumbot
MaxSecure	Trojan.Malware.110074091.susgen
Fortinet	W32/Ranumbot.AF1C!tr
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Mal/Generic-R + Troj/AutoG-KJ?

Mal/Generic-R + Troj/AutoG-KJ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X