Should I remove “Mal/Generic-R + Troj/MSIL-LWR”?

The Mal/Generic-R + Troj/MSIL-LWR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Troj/MSIL-LWR virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Mal/Generic-R + Troj/MSIL-LWR?


File Info:
crc32: F9F76B74
md5: ddfb3f53560bbb0c5eaf8171decfcca6
name: DDFB3F53560BBB0C5EAF8171DECFCCA6.mlw
sha1: 97c9ee669329b619c2d4e290f0a22503257aba5f
sha256: 097aac835d225d7243d82a466bf0ff46265e4904c354e6cf35ecffc757579b5f
sha512: 44425701b870f3023d3ac74e63897b66890ff2c1659694d64ecda36fa78f13060ee15fdc280aa78c560f8d6947fbe3edcf608cee72815bfbfc3fbd77d939f716
ssdeep: 48:666Xlstc1sFIcyREJPISV6iBzoHbOul2Trq6:21sacyRs3o94Tl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: IXM4A.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: IXM4A.exe

Mal/Generic-R + Troj/MSIL-LWR also known as:

K7AntiVirus	Trojan ( 0053fb951 )
Lionic	Trojan.MSIL.Starter.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKDZ.50154
Cylance	Unsafe
Zillya	Trojan.Starter.Win32.28201
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Trojan:MSIL/Starter.694bcdcc
K7GW	Trojan ( 0053fb951 )
Cybereason	malicious.3560bb
Cyren	W32/A-240503e5!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Starter.DC
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.MSIL.Starter.ht
BitDefender	Trojan.GenericKDZ.50154
NANO-Antivirus	Trojan.Win32.Starter.fjlwsl
MicroWorld-eScan	Trojan.GenericKDZ.50154
Tencent	Msil.Trojan.Starter.Wwyd
Ad-Aware	Trojan.GenericKDZ.50154
Sophos	Mal/Generic-R + Troj/MSIL-LWR
Comodo	TrojWare.MSIL.Starter.DC@7xi624
BitDefenderTheta	Gen:NN.ZemsilF.34236.am0@a04dde
McAfee-GW-Edition	BehavesLike.Win32.Generic.zz
FireEye	Generic.mg.ddfb3f53560bbb0c
Emsisoft	Trojan.GenericKDZ.50154 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1107310
Antiy-AVL	Trojan/Generic.ASMalwS.28B6301
Microsoft	Trojan:MSIL/Starter.AT!MTB
GData	Trojan.GenericKDZ.50154
McAfee	GenericRXHC-ZQ!DDFB3F53560B
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Panda	Trj/CI.A
Rising	Trojan.Starter!1.B483 (CLASSIC)
Yandex	Trojan.Starter!118Jzp+N4as
Ikarus	Trojan.Zbot
Fortinet	MSIL/Zbot.DB25!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Mal/Generic-R + Troj/MSIL-LWR?

Mal/Generic-R + Troj/MSIL-LWR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X