Mal/Generic-S + Troj/AutoG-LY (file analysis)

The Mal/Generic-S + Troj/AutoG-LY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-S + Troj/AutoG-LY virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/AutoG-LY?


File Info:
name: 65C66BE3D5C9FC3ADFD4.mlw
path: /opt/CAPEv2/storage/binaries/868fb7949784d04e16b1779f6ec0a30a2eac53bc86b039fb7d7489a0e249be33
crc32: BFF860D8
md5: 65c66be3d5c9fc3adfd47d832d9c4cae
sha1: 870393073c0590d0c3319cbdbdc4a08b42af614b
sha256: 868fb7949784d04e16b1779f6ec0a30a2eac53bc86b039fb7d7489a0e249be33
sha512: ef38727f2ad47709f20e1825e67a87bd2898dd08fafac6aa884c8499beaa7299517077a0a22e77aea028ff162b93803c248ea6fa26764ccd3cc2cc9b2eeb6465
ssdeep: 98304:A2DdzY6KwE9+tAm3aJEO5MFfMdYRPa5JuZ8ZIkbFT4th9fYr:BDd86KwE9c3aSO5MvRP7CpMBfs
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1140633213660D476CB5C48B84456ED5909F7F821677BAEC33FDA8B9A0BC06E234397C9
sha3_384: 39b2098499c8a3093b8d50f6e45d4c1309aefd03e7983f3fbceb7a60e31e8ffa06ca1534973f9f0687da182055f41188
ep_bytes: e8e38c0000e978feffff8bff558bec81
timestamp: 2020-03-02 07:20:41

Version Info:
0: [No Data]

Mal/Generic-S + Troj/AutoG-LY also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.65c66be3d5c9fc3a
CAT-QuickHeal	Trojan.ShellcodeRI.S17487125
McAfee	Lockbit-FSUC!65C66BE3D5C9
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1591128
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Kryptik.954c2cc7
K7GW	Trojan ( 00573d511 )
K7AntiVirus	Trojan ( 00573d511 )
Cyren	W32/Kryptik.COL.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Kryptik.HHUF
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Heur.Mint.Dreidel.YtW@x4HvxIfi
NANO-Antivirus	Trojan.Win32.GoCloudnet.icopch
MicroWorld-eScan	Gen:Heur.Mint.Dreidel.YtW@x4HvxIfi
Emsisoft	Gen:Heur.Mint.Dreidel.YtW@x4HvxIfi (B)
DrWeb	Trojan.Siggen11.49724
TrendMicro	Backdoor.Win32.GLUPTEBA.SMTH.hp
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.wc
Sophos	Mal/Generic-S + Troj/AutoG-LY
Ikarus	Trojan.Win32.Ranumbot
Jiangmin	Trojan.Agentb.iaf
Antiy-AVL	Trojan/Generic.ASMalwS.3108552
Microsoft	Trojan:Win32/Glupteba.OI!MTB
GData	Gen:Heur.Mint.Dreidel.YtW@x4HvxIfi
AhnLab-V3	Malware/Win32.RL_Generic.R357718
ALYac	Gen:Heur.Mint.Dreidel.YtW@x4HvxIfi
MAX	malware (ai score=85)
VBA32	BScope.Trojan.Azorult
Malwarebytes	Malware.AI.1397507905
TrendMicro-HouseCall	Backdoor.Win32.GLUPTEBA.SMTH.hp
Rising	Trojan.Kryptik!8.8 (CLOUD)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Ranumbot.AF1C!tr
Cybereason	malicious.3d5c9f
Panda	Trj/GdSda.A

How to remove Mal/Generic-S + Troj/AutoG-LY?

Mal/Generic-S + Troj/AutoG-LY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X