Malware

Mal/Generic-S + Troj/Formbo-AKD (file analysis)

Malware Removal

The Mal/Generic-S + Troj/Formbo-AKD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-S + Troj/Formbo-AKD virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Mal/Generic-S + Troj/Formbo-AKD?


File Info:

crc32: EEDA72B8
md5: 3fc45878ccdf12070f526ff0246c1f28
name: 3FC45878CCDF12070F526FF0246C1F28.mlw
sha1: 10c1f43d42e4f2256f2024485a012c15adee2ef1
sha256: 4b6bc079ff664edfcf12f0d33f06e5fcfa98e7b6ac4c33fb5fc3c8c7910aab36
sha512: 763aa006cabb7a9b682f82d212539aed8972fdc258109873e91f6974a2a906fce530dcf142c71c39b826e7efae15da081532914fa4c3dba46737bda4e6ff3e5b
ssdeep: 12288:8kIBf7YDF8ejBvQ9XycNsiaX3Yil3jHpKbHS5NRz9N+MkPsmx9VCZ6vpoByOx:REy5X40THpKDS55N+MkPL5Qy0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Norway174 (2012 - 2013)
Assembly Version: 1.5.6.3
InternalName: IDisposableToIClosableAdapter.exe
FileVersion: 1.5.6.3
CompanyName: Norway174
LegalTrademarks:
Comments: Managing your mods!
ProductName: Norway174
ProductVersion: 1.5.6.3
FileDescription: Kerbal Space
OriginalFilename: IDisposableToIClosableAdapter.exe

Mal/Generic-S + Troj/Formbo-AKD also known as:

K7AntiVirusTrojan ( 0057e0291 )
DrWebTrojan.Siggen9.48175
CynetMalicious (score: 100)
SangforInfostealer.MSIL.Agensla.gen
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanPSW:MSIL/Agensla.19c88f26
K7GWTrojan ( 0057e0291 )
CyrenW32/MSIL_Agent.CAS.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Kryptik.ABLI
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefenderTrojan.GenericKD.37095859
MicroWorld-eScanTrojan.GenericKD.37095859
Ad-AwareTrojan.GenericKD.37095859
SophosMal/Generic-S + Troj/Formbo-AKD
McAfee-GW-EditionPWS-FCXD!3FC45878CCDF
FireEyeTrojan.GenericKD.37095859
EmsisoftTrojan.GenericKD.37095859 (B)
AviraTR/Kryptik.lscua
MicrosoftTrojan:Win32/FormBook.AM!MTB
ArcabitTrojan.Generic.D23609B3
AegisLabTrojan.MSIL.Agensla.i!c
GDataTrojan.GenericKD.37095859
AhnLab-V3Trojan/Win.NEGASTEAL.C4527039
McAfeePWS-FCXD!3FC45878CCDF
MAXmalware (ai score=81)
MalwarebytesSpyware.TelegramBot
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.F0D1C00FE21
IkarusTrojan.Inject
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Malicious_Behavior.SBX
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Mal/Generic-S + Troj/Formbo-AKD?

Mal/Generic-S + Troj/Formbo-AKD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment