Mal/Generic-S + Troj/Formbo-VN malicious file

The Mal/Generic-S + Troj/Formbo-VN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-S + Troj/Formbo-VN virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Mal/Generic-S + Troj/Formbo-VN?


File Info:
crc32: 2E405ADE
md5: e332cd8461a51e3e6ae9be232dfe4c4b
name: E332CD8461A51E3E6AE9BE232DFE4C4B.mlw
sha1: ef398504142eade269b313b111df0f2901594f34
sha256: 218e7f1755820b83b5a9a30c133fd1d5563a14d1e54b54ac42620c608efdb90d
sha512: 441f6898008a497d5bb32c71ac8b9249702c97ccaecf4932b91d1e9770a7ccfc6de49facc48eefe89a7df6e81abcee909603e4a6252136f0ba66e6dcf825a41b
ssdeep: 6144:rPKyLLgM9BqNm1PQs45eXxtoUqOrs48H8bt/BuiI:mTM9wN64s4oXx2p948Het/2
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
ProductName: Mango
Translation: 0x0409 0x0000

Mal/Generic-S + Troj/Formbo-VN also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 00578f7b1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed2.42885
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.45872233
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Alibaba	TrojanSpy:Win32/SpyNoon.97eb1181
K7GW	Trojan ( 00578f7b1 )
Cybereason	malicious.461a51
Cyren	W32/Injector.AFR.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Injector.EOUW
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.Win32.Noon.gen
BitDefender	Trojan.GenericKD.45872233
NANO-Antivirus	Trojan.Win32.Packed2.iphzuv
MicroWorld-eScan	Trojan.GenericKD.45872233
Ad-Aware	Trojan.GenericKD.45872233
Sophos	Mal/Generic-S + Troj/Formbo-VN
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.dc
FireEye	Generic.mg.e332cd8461a51e3e
Emsisoft	Trojan.GenericKD.45872233 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
Avira	TR/Injector.qmasq
Microsoft	Trojan:Win32/Lokibot.RW!MTB
GData	Trojan.GenericKD.45872233
AhnLab-V3	Trojan/Win.Nsis.C4371168
McAfee	Artemis!E332CD8461A5
MAX	malware (ai score=81)
VBA32	Trojan.Packed
Malwarebytes	Trojan.Crypt
Fortinet	W32/Injector.EORP!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove Mal/Generic-S + Troj/Formbo-VN?

Mal/Generic-S + Troj/Formbo-VN removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Mal/Generic-S + Troj/Formbo-VN malicious file