Mal/Generic-R + Troj/Formbo-WA (file analysis)

The Mal/Generic-R + Troj/Formbo-WA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Troj/Formbo-WA virus can do?

How to determine Mal/Generic-R + Troj/Formbo-WA?


File Info:
crc32: 51CD424A
md5: 52a4602da021d95b924bfe5534d8dd50
name: 52A4602DA021D95B924BFE5534D8DD50.mlw
sha1: 69ace8924d73d722ba772af235fcd78a98821fb3
sha256: bd5ca223f31f19c9f72102f04c8dcbc6ef6514aa02fefc0b8a937b16ef55cb3a
sha512: a28233ebb088dbb9071f45d122c8812fd504d8e8d1abb52647b69cff770f13cddcfa1ac0dc8f417a7464cbb28a0238a370b838d75367e35a438ca34a638f25ac
ssdeep: 12288:DoVaoCYxqt/tei9KzJmW1aKAhGdoNDl2Vb6SWn1mVteRnslY081WobFKw:DdexakuKVDWh88DcIYXmslRwZKw
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Wondershare Inc. (C) Copyright 2009-2021
Assembly Version: 0.1.0.0
InternalName: QueueSegment.exe
FileVersion: 0.1.0.0
CompanyName: Wondershare Inc.
LegalTrademarks: 
Comments: 
ProductName: Dr Fone
ProductVersion: 0.1.0.0
FileDescription: Dr Fone
OriginalFilename: QueueSegment.exe

Mal/Generic-R + Troj/Formbo-WA also known as:

K7AntiVirus	Trojan ( 005794101 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.580
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.36515399
Malwarebytes	Trojan.Crypt.MSIL
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Win32/Kryptik.ali2000016
K7GW	Trojan ( 005794101 )
Cyren	W32/MSIL_Kryptik.DON.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/Kryptik.AAAX
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
BitDefender	Trojan.GenericKD.36515399
ViRobot	Trojan.Win32.Z.Kryptik.1108480.P
MicroWorld-eScan	Trojan.GenericKD.36515399
Ad-Aware	Trojan.GenericKD.36515399
Sophos	Mal/Generic-R + Troj/Formbo-WA
Comodo	Malware@#201rraop9b2tk
BitDefenderTheta	Gen:NN.ZemsilF.34628.dn0@aSIr4kb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.MSIL.MALREP.THCAFBA
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
FireEye	Generic.mg.52a4602da021d95b
Emsisoft	Trojan.Crypt (A)
Avira	TR/Kryptik.apyxg
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:MSIL/Kryptik.VU!MTB
Arcabit	Trojan.Generic.D22D2E47
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKD.36515399
AhnLab-V3	Malware/Win32.Gen:Variant.Bulz.C4382009
McAfee	PWS-FCXD!52A4602DA021
MAX	malware (ai score=80)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.MSIL.MALREP.THCAFBA
Rising	Trojan.Kryptik!8.8 (CLOUD)
Yandex	Trojan.Igent.bVwpkp.9
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Kryptik.HwMA87EA

How to remove Mal/Generic-R + Troj/Formbo-WA?

Mal/Generic-R + Troj/Formbo-WA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X