Malware

About “Mal/Generic-S + Mal/Inject-GJ” infection

Malware Removal

The Mal/Generic-S + Mal/Inject-GJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-S + Mal/Inject-GJ virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Creates a copy of itself

Related domains:

pastebin.com
ocsp.digicert.com

How to determine Mal/Generic-S + Mal/Inject-GJ?


File Info:

crc32: 986A9210
md5: 21047db92af08eb5a1db092dd4b0f250
name: 21047DB92AF08EB5A1DB092DD4B0F250.mlw
sha1: 2a0b44e4f8937f671163d7ea45908748cd248582
sha256: 1a0f117957b0f1f82943d048076f056419c6189d5152adb1d0e76eba331e47c1
sha512: feb0ac0d4b5acc733174ba5309fee841eb8ddf0d5e6ef442182d4dd6646b6d723b4147c973a2b5dcc804c8a8ff13dfec85e073a40b63f8d6be76b06a1173803f
ssdeep: 12288:kJa3KlWhs4HKQXYuU0J6RZDKiTHIF94fWUkPXqXoQdUhVk2hFqYi2CO0HkyKfAlC:8NcHRXYVG6R5Ki89E39oJ1QxlCyUkkXB
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Mal/Generic-S + Mal/Inject-GJ also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005393141 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PackedENT.172
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Skeeyah.J1
ALYacGen:Variant.Symmi.93251
CylanceUnsafe
ZillyaTrojan.Generic.Win32.335508
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.6db7cf08
K7GWTrojan ( 005376b01 )
Cybereasonmalicious.92af08
CyrenW32/S-2e4c4278!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GIRH
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Packed.Razy-9810073-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Symmi.93251
NANO-AntivirusTrojan.Win32.Kryptik.fgmwlh
MicroWorld-eScanGen:Variant.Symmi.93251
TencentTrojan.Win32.Kryptik.gifya
Ad-AwareGen:Variant.Symmi.93251
SophosMal/Generic-S + Mal/Inject-GJ
ComodoTrojWare.Win32.Kryptik.TLS@812zm8
BitDefenderThetaGen:NN.ZexaF.34236.@CX@ai9b2Ri
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Sytro.fc
FireEyeGeneric.mg.21047db92af08eb5
EmsisoftGen:Variant.Symmi.93251 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.cmwkx
AviraHEUR/AGEN.1141086
eGambitUnsafe.AI_Score_99%
MicrosoftVirTool:Win32/CeeInject.AKZ!bit
ArcabitTrojan.Symmi.D16C43
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Symmi.93251
TACHYONTrojan/W32.Selfmod
AhnLab-V3Malware/Win32.Generic.C2647518
Acronissuspicious
McAfeePacked-FJB!21047DB92AF0
MAXmalware (ai score=100)
VBA32Trojan.Packed
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
IkarusTrojan-Downloader.Win32.FakeAlert
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Mal/Generic-S + Mal/Inject-GJ?

Mal/Generic-S + Mal/Inject-GJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment