What is “Mal/Generic-S + Troj/Formbo-AII”?

The Mal/Generic-S + Troj/Formbo-AII is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-S + Troj/Formbo-AII virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/Formbo-AII?


File Info:
crc32: 907A7F56
md5: 3fbfc82d120ab09cc7ffa16cb70ac4e6
name: 3FBFC82D120AB09CC7FFA16CB70AC4E6.mlw
sha1: 695b8743c0a62a837d31d2e6e6dd1e574a76de03
sha256: 4f9d8536fa4475655dd14db7d472399f2b7214ddb16d3483f9a2a673e4fc1543
sha512: 6d6e3fc02cd2b10e30c472b739a2f6b82953d6e4a9ef3c44ad19fb6d8a843a0d7e81ce78c65b8837674e95a1d8848102b1172de6d3f46bdc8aa9fbb20ff60da8
ssdeep: 6144:8Qq+heTn4+ufeHyGM3enCcfzVpvRJjl7NSY7Tx0qp:TheTnRdHyGM3X67ZbNSY7Kqp
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Mal/Generic-S + Troj/Formbo-AII also known as:

K7AntiVirus	Trojan ( 0057d5b51 )
DrWeb	Trojan.Packed2.43157
Cynet	Malicious (score: 100)
Malwarebytes	Trojan.Injector
Sangfor	Trojan.Win32.Agensla.gen
K7GW	Trojan ( 0057d5b51 )
Cyren	W32/Ninjector.J.gen!Camelot
Symantec	Trojan.Gen.2
ESET-NOD32	NSIS/Injector.ALG
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan-PSW.Win32.Agensla.gen
BitDefender	Trojan.GenericKD.46398592
ViRobot	Trojan.Win32.Z.Agent.235568
MicroWorld-eScan	Trojan.GenericKD.46398592
Ad-Aware	Trojan.GenericKD.46398592
Sophos	Mal/Generic-S + Troj/Formbo-AII
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
FireEye	Trojan.GenericKD.46398592
Emsisoft	Trojan.GenericKD.46398592 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Injector.udvce
Kingsoft	Win32.PSWTroj.Undef.(kcloud)
Microsoft	Trojan:Win32/SpyNoon.SS!MTB
Arcabit	Trojan.Generic.D2C3FC80
GData	Win32.Trojan-Stealer.FormBook.AMMIZX
McAfee	Artemis!3FBFC82D120A
MAX	malware (ai score=84)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R06CH0DEV21
Rising	Trojan.Injector/NSIS!1.D6D7 (CLASSIC)
Ikarus	Win32.SuspectCrc
Fortinet	W32/ALG!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Mal/Generic-S + Troj/Formbo-AII?

Mal/Generic-S + Troj/Formbo-AII removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X