Mal/Generic-R + Troj/Trickb-AC malicious file

The Mal/Generic-R + Troj/Trickb-AC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Troj/Trickb-AC virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Looks up the external IP address

Related domains:

ipinfo.io

158.102.105.176.zen.spamhaus.org

158.102.105.176.cbl.abuseat.org

158.102.105.176.b.barracudacentral.org

158.102.105.176.dnsbl-1.uceprotect.net

158.102.105.176.spam.dnsbl.sorbs.net

How to determine Mal/Generic-R + Troj/Trickb-AC?


File Info:
crc32: 6EE0216A
md5: b5f65f1dc4898c38176df9bca9145463
name: B5F65F1DC4898C38176DF9BCA9145463.mlw
sha1: a5c3d08c1d81c5ea30629623bcdf25d6097e6e88
sha256: bee20c65f4bae2d46fd7d8d32650fed7eb60d0cd9562886d979e1f74e1f4772b
sha512: ca91ca3793b4a7a195a03de93cfe2b7b2c4904b28696e9e7598df223ab98026be93d3c93fb7877f281d0964837c0acee6ba7267a6ec6c60676d48372597a81a3
ssdeep: 6144:F62tjX2wZx8GcDdbVRvCdEnjzOWy24Qm4:JENvCUSW6
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2001-2002 Nikolay Denisov
InternalName: GuiLib
FileVersion: 1, 0, 0, 1
OriginalFilename: GuiLib.dll
ProductVersion: 1, 0, 0, 1
Translation: 0x0409 0x04b0

Mal/Generic-R + Troj/Trickb-AC also known as:

Lionic	Trojan.Win32.Trickpak.4!c
DrWeb	Trojan.KillProc2.16234
ALYac	Trojan.GenericKDZ.76226
Zillya	Trojan.Trickpak.Win32.89
Sangfor	Trojan.Win32.TrickBot.SS
K7GW	Trojan ( 0057eea51 )
K7AntiVirus	Trojan ( 0057eea51 )
Cyren	W32/Trickbot.GA.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Kryptik.HLPI
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Trickpak.gen
BitDefender	Trojan.GenericKDZ.76226
MicroWorld-eScan	Trojan.GenericKDZ.76226
Tencent	Malware.Win32.Gencirc.10ce62fa
Ad-Aware	Trojan.GenericKDZ.76226
Sophos	Mal/Generic-R + Troj/Trickb-AC
TrendMicro	TROJ_GEN.R04AC0WG621
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
FireEye	Trojan.GenericKDZ.76226
Emsisoft	Trojan.GenericKDZ.76226 (B)
Avira	TR/AD.Ryuk.wtwnt
Microsoft	Trojan:Win32/TrickBot.SS!MTB
Gridinsoft	Trojan.Win32.Gen.oa!s1
GData	Trojan.GenericKDZ.76226
AhnLab-V3	Trojan/Win.Generic.C4542237
McAfee	Trickbot-FTKT!B5F65F1DC489
MAX	malware (ai score=86)
VBA32	Trojan.Trickpak
Malwarebytes	Trojan.TrickBot
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R04AC0WG621
Yandex	Trojan.Trickpak!ZmGX4GeeKDo
Ikarus	Trojan.Emotet
MaxSecure	Trojan.Malware.109946090.susgen
Fortinet	W32/Trickbot.158!tr
AVG	Win32:Malware-gen

How to remove Mal/Generic-R + Troj/Trickb-AC?

Mal/Generic-R + Troj/Trickb-AC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Mal/Generic-R + Troj/Trickb-AC malicious file