Malware

Mal/Generic-S + Troj/Formbo-AFW information

Malware Removal

The Mal/Generic-S + Troj/Formbo-AFW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-S + Troj/Formbo-AFW virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/Formbo-AFW?


File Info:

crc32: 314186CB
md5: 606bbf3d7f95d79e82fc22fee2dd0426
name: 606BBF3D7F95D79E82FC22FEE2DD0426.mlw
sha1: 325d38fa5b2ff7e5a82c3149a6f09c7a91e8dc04
sha256: 51abb9671e2f9449e14d2467c5e21d87362c68073652d925f26b61397246f91f
sha512: 33234b3eda1f4a9f3c5ad0f8799caf87a500bc70172e2432ccb1e57cc8edec95504f36062e129db8d4d574ca26db1c3385d32445b9fd4c2a2f7e0539d52f4b6f
ssdeep: 3072:DQIURTXJ+Mb76nKP3lhtu7bUUsBbCyJDe6uwVv4v0bZjlVussubioyl:Ds9nVht4UUib7Zvr1RO
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Mal/Generic-S + Troj/Formbo-AFW also known as:

K7AntiVirusRiskware ( 0040eff71 )
DrWebTrojan.Packed2.43117
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.46320663
CylanceUnsafe
ZillyaTrojan.Formbook.Win32.1684
SangforBackdoor.Win32.Remcos.gen
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaBackdoor:MSIL/AgentTesla.cbd54575
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.a5b2ff
CyrenW32/Injector.AIC.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32Win32/Formbook.AA
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Backdoor.Win32.Remcos.gen
BitDefenderTrojan.GenericKD.46320663
SUPERAntiSpywareTrojan.Agent/Gen-Tracur
MicroWorld-eScanTrojan.GenericKD.46320663
Ad-AwareTrojan.GenericKD.46320663
SophosMal/Generic-S + Troj/Formbo-AFW
ComodoMalware@#11vea6kbrm9if
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionRDN/Generic BackDoor
FireEyeGeneric.mg.606bbf3d7f95d79e
EmsisoftTrojan.GenericKD.46320663 (B)
SentinelOneStatic AI – Malicious PE
AviraBDS/Remcos.grbmy
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:MSIL/AgentTesla.AM!MTB
ArcabitTrojan.Generic.D2C2CC17
AegisLabTrojan.Win32.Remcos.m!c
GDataTrojan.GenericKD.46320663
AhnLab-V3Malware/Win.Generic.C4480693
McAfeeArtemis!606BBF3D7F95
MAXmalware (ai score=85)
VBA32Trojan.Wacatac
MalwarebytesSpyware.FormBook
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.F0D1C00EI21
RisingTrojan.Injector/NSIS!1.D61F (CLASSIC)
IkarusTrojan.Inject
FortinetNSIS/Injector.EPJF!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Mal/Generic-S + Troj/Formbo-AFW?

Mal/Generic-S + Troj/Formbo-AFW removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment