Mal/Generic-S + Troj/MSIL-ROR removal instruction

The Mal/Generic-S + Troj/MSIL-ROR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-S + Troj/MSIL-ROR virus can do?

Network activity detected but not expressed in API logs

How to determine Mal/Generic-S + Troj/MSIL-ROR?


File Info:
crc32: 2F697F81
md5: cab21d4c7a69ebc317ff2c7824fcd493
name: CAB21D4C7A69EBC317FF2C7824FCD493.mlw
sha1: dc73b7b8e7cdf229ec9b99bc8d0aaf01417e1da2
sha256: 8f9f2efa106583f82d29348a230d329b6d86b2427bf94eea2df4a5301a9c4ae0
sha512: 25ca376472d160f59103c496908a87a12ac67aa457d41c9f94990bc00e6f1212f6670fa45df7bebcc1d0622db3d3d6188f59f1e92afe7139c550ad98e2e001d0
ssdeep: 6144:/sSIytTw+y9w6KdsxSMXpxjEMDHadof1MnKfBxISf/wskD78W5HynCwUmYJDK:/sctC9NKd+XXjNHadoakBlfIs87snC
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2011
Assembly Version: 1.1.0.0
InternalName: RemotingCachedDa.exe
FileVersion: 1.1.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: ggUI
ProductVersion: 1.1.0.0
FileDescription: ggUI
OriginalFilename: RemotingCachedDa.exe

Mal/Generic-S + Troj/MSIL-ROR also known as:

Lionic	Trojan.MSIL.Noon.l!c
DrWeb	Trojan.Packed2.43380
ALYac	Trojan.GenericKD.37492340
Cylance	Unsafe
Alibaba	Trojan:MSIL/Kryptik.2db8b390
K7GW	Trojan ( 005818241 )
K7AntiVirus	Trojan ( 005818241 )
Cyren	W32/Trojan.GPX.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Kryptik.ACPR
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Spy.MSIL.Noon.gen
BitDefender	Trojan.GenericKD.37492340
MicroWorld-eScan	Trojan.GenericKD.37492340
Ad-Aware	Trojan.GenericKD.37492340
Sophos	Mal/Generic-S + Troj/MSIL-ROR
TrendMicro	TrojanSpy.MSIL.NEGASTEAL.SMG
McAfee-GW-Edition	AgentTesla-FDBQ!CAB21D4C7A69
FireEye	Trojan.GenericKD.37492340
Emsisoft	Trojan.Crypt (A)
Avira	TR/AD.GenSteal.ncsiy
Microsoft	Trojan:MSIL/AgentTesla.COZ!MTB
Arcabit	Trojan.Generic.D23C1674
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Noon.gen
GData	Trojan.GenericKD.37492340
AhnLab-V3	Trojan/Win.MSILKrypt.R439085
McAfee	AgentTesla-FDBQ!CAB21D4C7A69
Malwarebytes	Trojan.MalPack.PNG.Generic
TrendMicro-HouseCall	TrojanSpy.MSIL.NEGASTEAL.SMG
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Noon.ACPR!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove Mal/Generic-S + Troj/MSIL-ROR?

Mal/Generic-S + Troj/MSIL-ROR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X