Malware

Mal/Generic-R + Troj/Autoit-CPL removal instruction

Malware Removal

The Mal/Generic-R + Troj/Autoit-CPL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Mal/Generic-R + Troj/Autoit-CPL virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine Mal/Generic-R + Troj/Autoit-CPL?



File Info:

name: D932CA0A64AD15279195.mlw
path: /opt/CAPEv2/storage/binaries/f0ac3f6c1508734de278272ce34b4a962adb80b2c99372ec5dddc4babf6e0ab1
crc32: 993DC21E
md5: d932ca0a64ad15279195c3d4d97601ad
sha1: 6c98b651635248d26c73b619c39b1920e6221784
sha256: f0ac3f6c1508734de278272ce34b4a962adb80b2c99372ec5dddc4babf6e0ab1
sha512: cc39e35dbdca730cd0a0433e8c982ba093de07b956f605a816d46680fce0a817776d91b0329c027abf03ddc32279ef1848880ee719ea2ed79e7cb6c81d17767e
ssdeep: 12288:SCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBgaKo7Q:SCdxte/80jYLT3U1jfsWaKo7Q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B5058C2273DDC360CB769173BF69B7016EBF78650630B85B2F880D79A950171262DBA3
sha3_384: 450dd90481674c5a7215ae39249379c67ddeb605ba5f3b6845971a6e7ca735650de7a0d6dfb3671bd25dac4da2c0f200
ep_bytes: e8b8d00000e97ffeffffcccccccccccc
timestamp: 2021-11-23 13:25:25


Version Info:

CompanyName: SgbIsHidR
FileVersion: 0.0.0.0
Translation: 0x0809 0x04b0

Mal/Generic-R + Troj/Autoit-CPL also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!e
Elasticmalicious (high confidence)
FireEyeTrojan.GenericKD.47498352
McAfeeArtemis!D932CA0A64AD
K7AntiVirusTrojan ( 0054bc841 )
AlibabaTrojan:Win32/Predator.71db3e2c
K7GWTrojan ( 0054bc841 )
CyrenW32/AutoIt.SQ.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Autoit.OGC
TrendMicro-HouseCallTrojan.AutoIt.VICTORYGATE.SM
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyUDS:Trojan.Script.Generic
BitDefenderTrojan.GenericKD.47498352
MicroWorld-eScanTrojan.GenericKD.47498352
AvastAutoIt:Runner-BG [Trj]
Ad-AwareTrojan.GenericKD.47498352
SophosMal/Generic-R + Troj/Autoit-CPL
Comodo.UnclassifiedMalware@0
TrendMicroTrojan.AutoIt.VICTORYGATE.SM
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.ch
EmsisoftTrojan.GenericKD.47498352 (B)
GDataWin32.Trojan.Agent.A8RHY4
AviraWORM/FakeExt.Gen8
Antiy-AVLTrojan/Generic.ASCommon.16F
GridinsoftRansom.Win32.Gen.sa
ArcabitTrojan.Generic.D2D4C470
MicrosoftTrojan:Win32/AgentTesla.PC!MTB
AhnLab-V3Malware/Win32.RL_Generic.R304213
ALYacTrojan.GenericKD.47498352
MAXmalware (ai score=80)
MalwarebytesTrojan.Agent
APEXMalicious
RisingMalware.FakeFolder/ICON!1.D519 (CLASSIC)
FortinetAutoIt/Agent.OGC!tr
AVGAutoIt:Runner-BG [Trj]
CrowdStrikewin/malicious_confidence_70% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Mal/Generic-R + Troj/Autoit-CPL?

Mal/Generic-R + Troj/Autoit-CPL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment