How to remove “Mal/Generic-S + Mal/AsyncRat-A”?

The Mal/Generic-S + Mal/AsyncRat-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-S + Mal/AsyncRat-A virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Mal/Generic-S + Mal/AsyncRat-A?


File Info:
name: C1C4ABB1F4A508F6CDB1.mlw
path: /opt/CAPEv2/storage/binaries/e8cd5393fd5dde106bfa5227f8aeffd0153ff303dff473dc016e5b7d6d8cec0b
crc32: F3B76B8B
md5: c1c4abb1f4a508f6cdb11ce3dca7a795
sha1: f38d90968c4c9e4eed49517f1b408e9ca2eedd41
sha256: e8cd5393fd5dde106bfa5227f8aeffd0153ff303dff473dc016e5b7d6d8cec0b
sha512: d389faaaf6cd47969351858ecbdb533b80abe4b2dc3b2f3a0bbb2bde3782c7c40718ba69e272ad2ab622218e95e9a90710bc24c6759f0ec9c76b7c8791b27550
ssdeep: 768:RXXGpIDHViPRZGiC9J26cXveeObMbNCl1+6SCv7mqb2nIpwH1oSQZv8GBZVc6KN:R5HWMXeeiMl8GbbXwp8kGBZVclN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B2535B002788C965E2AD4AF8ACF2950146B1D6772102CB5E7CC854DFAB9EFC656133EF
sha3_384: d089d9ddd478f60842e1132ce210ebb42bf4b4c3238bccb54880e7d9175875607713330fbb5935885f9b78dddd075661
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-12 03:47:42

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.7.0
InternalName: Client.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Client.exe
ProductName: 
ProductVersion: 1.0.7.0
Assembly Version: 1.0.7.0

Mal/Generic-S + Mal/AsyncRat-A also known as:

MicroWorld-eScan	IL:Trojan.MSILZilla.2627
FireEye	Generic.mg.c1c4abb1f4a508f6
CAT-QuickHeal	Backdoor.AsyncratFC.S22017128
ALYac	IL:Trojan.MSILZilla.2627
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005592e51 )
BitDefender	IL:Trojan.MSILZilla.2627
K7GW	Trojan ( 005592e51 )
BitDefenderTheta	Gen:NN.ZemsilF.34182.dm0@aaYXrdn
Cyren	W32/MSIL_Agent.BTI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.CFQ
ClamAV	Win.Packed.Samas-8025724-0
Kaspersky	HEUR:Backdoor.MSIL.DcRat.gen
Rising	Backdoor.AsyncRAT!1.C3F4 (CLASSIC)
Emsisoft	Trojan.Agent (A)
DrWeb	BackDoor.AsyncRATNET.2
McAfee-GW-Edition	BehavesLike.Win32.Generic.km
SentinelOne	Static AI – Malicious PE
Sophos	Mal/Generic-S + Mal/AsyncRat-A
APEX	Malicious
Avira	HEUR/AGEN.1145685
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Generic.ASMalwS.3520FF2
Microsoft	Backdoor:MSIL/AsyncRat.AD!MTB
SUPERAntiSpyware	Trojan.Agent/Gen-MSILZilla
GData	MSIL.Backdoor.DCRat.C
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Agent.C4526491
McAfee	GenericRXOW-GX!C1C4ABB1F4A5
Malwarebytes	Backdoor.Agent.MSIL.Generic
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!67AAfvGfyEY
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/CoinMiner.CFQ!tr
AVG	Win32:BackdoorX-gen [Trj]
Avast	Win32:BackdoorX-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Mal/Generic-S + Mal/AsyncRat-A?

Mal/Generic-S + Mal/AsyncRat-A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X