Malware

Mal/Generic-S + Troj/Steal-CEM removal tips

Malware Removal

The Mal/Generic-S + Troj/Steal-CEM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Mal/Generic-S + Troj/Steal-CEM virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • CAPE detected the AgentTeslaV3 malware family

How to determine Mal/Generic-S + Troj/Steal-CEM?


File Info:

name: AE5867A642BF929AD5B4.mlw
path: /opt/CAPEv2/storage/binaries/a81183619cf8dde1a9389734dc3ae61e5d98c44fad502c5a36baad0456b25a78
crc32: 8E13C60E
md5: ae5867a642bf929ad5b439529c90b62c
sha1: f890b3acf1d2ae0977b199175a64b07f11fb0ab9
sha256: a81183619cf8dde1a9389734dc3ae61e5d98c44fad502c5a36baad0456b25a78
sha512: c638db9287e4f3b2eb160d56fa144ca66540c160a1048a42caab3e72c91498a31e17e7d5b5fbf508c50d45864f56c94078fff1a8ea99684661903ab357207fd2
ssdeep: 6144:JZnuYFtUa9bk83DQ2RTl4qGPJm44s6n6Ud:JZnuqZ9VDp1lMRD4s65
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11E2419166714D520CB5F417FC41A820831F1DB07972AD6DF5AA6D8FA2F812CEF92B8E4
sha3_384: 92e583c3a9f93b1a214b05c6996c285c9a20e94f8f3a6fe0e9f28a5048580ead47c91119a2d3ffcae3b7b7816df2f796
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-10 10:06:11

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: LUbfmwmWEwpDMebsAYYFhPwUNzyq.exe
LegalCopyright:
OriginalFilename: LUbfmwmWEwpDMebsAYYFhPwUNzyq.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Mal/Generic-S + Troj/Steal-CEM also known as:

LionicTrojan.MSIL.Agensla.i!c
Elasticmalicious (high confidence)
MicroWorld-eScanIL:Trojan.MSILZilla.1773
FireEyeGeneric.mg.ae5867a642bf929a
CAT-QuickHealTrojan.MsilFC.S17874635
McAfeeBackDoor-FEOD!AE5867A642BF
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusSpyware ( 00589d031 )
AlibabaTrojan:Win32/thief.ali2000020
K7GWSpyware ( 00589d031 )
Cybereasonmalicious.642bf9
BitDefenderThetaGen:NN.ZemsilF.34114.nm0@auDhkqj
CyrenW32/Azorult.D.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Spy.AgentTesla.C
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Packed.Razy-9862812-0
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefenderIL:Trojan.MSILZilla.1773
NANO-AntivirusTrojan.Win32.Agensla.jiwurz
AvastWin32:PWSX-gen [Trj]
TencentWin32.Trojan.Generic.Loro
Ad-AwareIL:Trojan.MSILZilla.1773
TACHYONTrojan/W32.DN-Agent.221696.AC
SophosMal/Generic-S + Troj/Steal-CEM
ComodoMalware@#1hb12oj4dreg
DrWebBackDoor.SpyBotNET.25
TrendMicroTROJ_GEN.R06FC0DLA21
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
EmsisoftIL:Trojan.MSILZilla.1773 (B)
IkarusTrojan-Spy.Keylogger.AgentTesla
GDataMSIL.Trojan.PSE.18D6RFG
JiangminTrojan.PSW.MSIL.daql
eGambitUnsafe.AI_Score_100%
AviraTR/Spy.Gen8
Antiy-AVLTrojan/Generic.ASMalwS.34E8DBC
KingsoftWin32.PSWTroj.Undef.(kcloud)
GridinsoftRansom.Win32.AzorUlt.sa
MicrosoftPWS:MSIL/DarkStealer!MTB
CynetMalicious (score: 100)
AhnLab-V3Infostealer/Win.AgentTesla.R420346
VBA32Trojan.MSIL.AgentTesla
ALYacSpyware.AgentTesla
MAXmalware (ai score=99)
MalwarebytesSpyware.PasswordStealer.MSIL
TrendMicro-HouseCallTROJ_GEN.R06FC0DLA21
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL:UyYWd6HCtnNf719aKg2d0w)
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Razy.749950!tr
AVGWin32:PWSX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Mal/Generic-S + Troj/Steal-CEM?

Mal/Generic-S + Troj/Steal-CEM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment