Mal/Generic-S + Troj/Patched-BS malicious file

The Mal/Generic-S + Troj/Patched-BS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-S + Troj/Patched-BS virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Performs HTTP requests potentially not found in PCAP.
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/Patched-BS?

File Info:
name: DC9F66B9AF9E516EF578.mlw
path: /opt/CAPEv2/storage/binaries/8299089416d2a4e41a5bf2042b2edb091081d43adf22d4854953f3296c047186
crc32: ED020790
md5: dc9f66b9af9e516ef578f8b55a7b9c7c
sha1: 320cca3979894392ad3e689765acbf4b519153ad
sha256: 8299089416d2a4e41a5bf2042b2edb091081d43adf22d4854953f3296c047186
sha512: 1ac754b396b0a7a0acacf2c13a5ec619493481ea958450b19bac1b64ef1f17d72fbda22bdde97963755594877516950f6b2335943801fd7dbd699d3548fa8839
ssdeep: 12288:xbSPK1Vfv7PCo2HS+dRIo6kWPLF07GBGrKtn9LcQB:oPkjPCosldRIo6jF0OGrKtn9n
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12FE4126C0FD45F23D8A94A3893A6EF885BD628227B348BD3D12F115B19772E3DD57202
sha3_384: 03262cc84d532acfead4294732760ed15c586632f0589f206d8d40c25102791a6b7bae848b97433a3ed22a14879ecdb7
ep_bytes: e85b040000e935fdffff558bec81ec28
timestamp: 2008-06-12 09:37:53

Version Info:
Comments: 
CompanyName: Adobe Systems Incorporated
FileDescription: Adobe Acrobat SpeedLauncher
FileVersion: 9.0.0.2008061200
LegalCopyright: Copyright 1984-2008 Adobe Systems Incorporated and its licensors. All rights reserved.
ProductName: Adobe Acrobat
ProductVersion: 9.0.0.2008061200
OriginalFilename: AcroSpeedLaunch.exe
Translation: 0x0409 0x04e4

Mal/Generic-S + Troj/Patched-BS also known as:

How to remove Mal/Generic-S + Troj/Patched-BS?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.