Malware

Should I remove “Mal/Generic-S + Troj/TeslaA-KO”?

Malware Removal

The Mal/Generic-S + Troj/TeslaA-KO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-S + Troj/TeslaA-KO virus can do?

  • Network activity detected but not expressed in API logs

How to determine Mal/Generic-S + Troj/TeslaA-KO?


File Info:

crc32: 86D5A6AA
md5: 2111960d6148d9b9fead1da5fdef6f7a
name: 2111960D6148D9B9FEAD1DA5FDEF6F7A.mlw
sha1: bdc7dcecaa1d96d290cc427fc9b2070c7433bc73
sha256: b9b2ce68a18db98a1253e9ece1d2d99a030be25ad433ef2dd3889cff53316d99
sha512: 7421a6280cc172f6ec1157fd7e0b5025da10254ca99fbc90362116a609372f42a3d8de6a1aa0cd12781da35f7594fcf21c51318d6f0ab206fbb9019a75cf464a
ssdeep: 3072:7GVWWfHzzz+2Lkdx0xDJUNeUICghJmx7ZLLjWBuVN63CtIg8l9LMDEA/iY0nGBI:7akdxvYU4XmhFf63bg8bOEA/i/nrKD
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Hi
Assembly Version: 1.0.8.0
InternalName: EXkkZFSEjYYVxfCzJogyqTqLgVaACqjcpHF.exe
FileVersion: 1.0.8
CompanyName: Hi
LegalTrademarks: Hi
Comments: Hi
ProductName: Hi
ProductVersion: 1.0.8
FileDescription: Hi
OriginalFilename: EXkkZFSEjYYVxfCzJogyqTqLgVaACqjcpHF.exe

Mal/Generic-S + Troj/TeslaA-KO also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.SpyBotNET.25
MicroWorld-eScanGen:Variant.Razy.749950
FireEyeGeneric.mg.2111960d6148d9b9
CAT-QuickHealTrojanpws.Msil
McAfeePWS-FCSR!2111960D6148
CylanceUnsafe
AegisLabTrojan.MSIL.Stelega.i!c
K7AntiVirusSpyware ( 004bf53c1 )
BitDefenderGen:Variant.Razy.749950
K7GWSpyware ( 004bf53c1 )
Cybereasonmalicious.d6148d
BitDefenderThetaGen:NN.ZemsilF.34700.nm0@ay3yD9b
CyrenW32/Azorult.D.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.MSIL.Stelega.gen
AlibabaTrojanPSW:MSIL/DarkStealer.a6ee816f
ViRobotTrojan.Win32.Z.Razy.222208.EH
TencentWin32.Trojan.Spy.Hmqz
Ad-AwareGen:Variant.Razy.749950
SophosMal/Generic-S + Troj/TeslaA-KO
ComodoMalware@#arkzd36gpdhn
F-SecureTrojan.TR/Spy.Gen8
TrendMicroTROJ_GEN.R06CC0DLO20
McAfee-GW-EditionPWS-FCSR!2111960D6148
EmsisoftGen:Variant.Razy.749950 (B)
IkarusTrojan.MSIL.Spy
AviraTR/Spy.Gen8
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftPWS:MSIL/DarkStealer!MTB
GridinsoftSpy.Win32.Keylogger.oa
ArcabitTrojan.Razy.DB717E
ZoneAlarmHEUR:Trojan-PSW.MSIL.Stelega.gen
GDataGen:Variant.Razy.749950
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win32.AgentTesla.C3468286
ALYacGen:Variant.Razy.749950
MalwarebytesSpyware.TelegramBot.TOR
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Spy.Agent.AES
TrendMicro-HouseCallTROJ_GEN.R06CC0DLO20
RisingSpyware.AgentTesla!1.CDBE (CLASSIC)
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Razy.749950!tr
AVGWin32:PWSX-gen [Trj]
AvastWin32:PWSX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Generic/Trojan.PSW.c9f

How to remove Mal/Generic-S + Troj/TeslaA-KO?

Mal/Generic-S + Troj/TeslaA-KO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment