How to remove “Mal/Generic-R + Troj/TeslaA-CFT”?

The Mal/Generic-R + Troj/TeslaA-CFT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Troj/TeslaA-CFT virus can do?

Network activity detected but not expressed in API logs

How to determine Mal/Generic-R + Troj/TeslaA-CFT?


File Info:
crc32: 3DA47117
md5: d41dc428d436fbddcc8aaeb3f24af6f0
name: D41DC428D436FBDDCC8AAEB3F24AF6F0.mlw
sha1: a0f731377ea5d23c66c0a4a341ad34d814210683
sha256: d6590c3add709d2a0c46d229c56e274455d0d63bb4a38a3847ec9ea3187efb65
sha512: a44b770f6d05430422a0b7b2d34971ce0b9e4e00ac29ddf02695153feb09ed5cc647ba44692bb9bc2af03e79319e1c4ec0908bd0008da994ba4e5856ef755b4f
ssdeep: 12288:qpYu9nEPb36JplQwZ6cUmE0rUTYolxTWvlG3iG02rI+pppppppppppppppppppp:qpYuJEDw99G0+/xBiNPjUP
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016
Assembly Version: 1.0.0.0
InternalName: eCtl.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Generation
ProductVersion: 1.0.0.0
FileDescription: Generation
OriginalFilename: eCtl.exe

Mal/Generic-R + Troj/TeslaA-CFT also known as:

K7AntiVirus	Trojan ( 005828e71 )
Lionic	Trojan.MSIL.Agensla.i!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.1037
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46998417
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/starter.ali1000139
K7GW	Trojan ( 005828e71 )
Cyren	W32/MSIL_Kryptik.CYQ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ACVC
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.MSIL.Noon.gen
BitDefender	Trojan.GenericKD.46998417
MicroWorld-eScan	Trojan.GenericKD.46998417
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Trojan.GenericKD.46998417
Sophos	Mal/Generic-R + Troj/TeslaA-CFT
Comodo	Malware@#26brqu037ps0k
BitDefenderTheta	Gen:NN.ZemsilF.34170.tn0@auLTvPm
TrendMicro	TrojanSpy.MSIL.NEGASTEAL.DYSHPYO
McAfee-GW-Edition	AgentTesla-FCYX!D41DC428D436
FireEye	Generic.mg.d41dc428d436fbdd
Emsisoft	Trojan.GenericKD.46998417 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Trojan:MSIL/AgentTesla.CTS!MTB
GData	Trojan.GenericKD.46998417
AhnLab-V3	Trojan/Win.AgentTesla.C4639777
McAfee	AgentTesla-FCYX!D41DC428D436
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Crypt.MSIL
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TrojanSpy.MSIL.NEGASTEAL.DYSHPYO
Ikarus	Trojan.MSIL.Inject
Fortinet	Malicious_Behavior.SB
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove Mal/Generic-R + Troj/TeslaA-CFT?

Mal/Generic-R + Troj/TeslaA-CFT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X