Mal/Generic-S + Troj/Formbo-ANE information

The Mal/Generic-S + Troj/Formbo-ANE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-S + Troj/Formbo-ANE virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/Formbo-ANE?


File Info:
crc32: 5F5DF558
md5: e1df9b8f6170bc4241edffd642949901
name: E1DF9B8F6170BC4241EDFFD642949901.mlw
sha1: 261767a7e271d39393619109d1310f04dfba5b41
sha256: 8b225e713429dd95fed7fe2af260d9076d627279fc86d152baedd973f0b72304
sha512: ce8101ebf096555be8e6cd02d261ae9a244978e91247291528d4cc49689cf5f1760f54672cfb5dd5648ac0a6c8956011faa4faf2bc63a06bc402cfdc9c74f23a
ssdeep: 6144:rTqjFeDgN8f9QQbj67yFKvyiUmSw87aplOTCMCNY8r0lkssE3plf:fZg4qQb8FzUmS7ClOTCnJglWE3
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: roscoe
FileVersion: 0.10.0.3
CompanyName: vote
LegalTrademarks: roadhouse
Comments: neurology
ProductName: squiggly
FileDescription: diggers
Translation: 0x0000 0x04e4

Mal/Generic-S + Troj/Formbo-ANE also known as:

DrWeb	Trojan.Siggen14.7062
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46538948
Cylance	Unsafe
Sangfor	Spyware.Win32.Noon.gen
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanPSW:Win32/Tnega.bd58c380
K7GW	Trojan ( 0052eef11 )
Cyren	W32/Ninjector.J.gen!Camelot
Symantec	Trojan Horse
ESET-NOD32	Win32/Formbook.AA
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-PSW.Win32.Agensla.gen
BitDefender	Trojan.GenericKD.46538948
MicroWorld-eScan	Trojan.GenericKD.46538948
Ad-Aware	Trojan.GenericKD.46538948
Sophos	Mal/Generic-S + Troj/Formbo-ANE
Comodo	Malware@#11ix1oclf4xah
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
FireEye	Trojan.GenericKD.46538948
Emsisoft	Trojan.GenericKD.46538948 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.Swotter.kxxpi
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Trojan:Win32/Tnega.BK!MTB
Gridinsoft	Trojan.Win32.Agent.dd!n
GData	Win32.Trojan-Stealer.FormBook.EE3CLB
AhnLab-V3	Trojan/Win.Generic.C4531261
McAfee	Artemis!E1DF9B8F6170
MAX	malware (ai score=89)
Malwarebytes	Trojan.Dropper.NSIS
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.F0D1C00FP21
Ikarus	Win32.SuspectCrc
Fortinet	W32/Kryptik.J!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Mal/Generic-S + Troj/Formbo-ANE?

Mal/Generic-S + Troj/Formbo-ANE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X