Malware

Should I remove “Mal/Kolab-G”?

Malware Removal

The Mal/Kolab-G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Mal/Kolab-G virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Mal/Kolab-G?



File Info:

name: 49BFC09176CC938662D0.mlw
path: /opt/CAPEv2/storage/binaries/fc32b278459ec91dcc2357a1d7950bf33990c7bb1ec4328f1ea5b3023479621a
crc32: 9EA6743F
md5: 49bfc09176cc938662d0da1ada6cba84
sha1: 7de3e55089077f47d81b2304cd6ca39f08413a5a
sha256: fc32b278459ec91dcc2357a1d7950bf33990c7bb1ec4328f1ea5b3023479621a
sha512: 759130b26137b36bdca772f2bbcfebf290497226328e902e3a321ceff8e6865b367eeaf0fbdca132ed245d00e399c7cb2a7ef0daca3e34207af0bbff217aa0cc
ssdeep: 6144:027NDnQo41QAOMwEIzUjQiZZvEYqWnKZ+pnVam:0k64BEIYjQWvrq1snkm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A749E2A7200CA74D81470F162A5DBC05EAA3DFB1A052D477B74B245E5B60EBDFA20FD
sha3_384: 366ee8fa12c0e0e7229bfa98e2235aea118faa7ca152aceeb689f01576712aaf6b6de2f4f027b7d894cf285325c55c59
ep_bytes: e8ab4e0000e916feffff8bc18b4c2404
timestamp: 2011-05-10 03:22:44


Version Info:

FileDescription: Microsoft
FileVersion: 1,0,0,0
InternalName: Application
LegalCopyright: 
OriginalFilename: Example.exe
ProductName: Microsoft
ProductVersion: 1.0.0.0
Translation: 0x0409 0x04b0

Mal/Kolab-G also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Zbot.lmue
tehtrisGeneric.Malware
MicroWorld-eScanGen:Heur.IPZ.3
ClamAVWin.Malware.Agentb-6964357-0
FireEyeGeneric.mg.49bfc09176cc9386
CAT-QuickHealWorm.Dorkbot.A
ALYacGen:Heur.IPZ.3
Cylanceunsafe
SangforDropper.Win32.Agent.Vb0m
K7AntiVirusTrojan ( 0024cd1a1 )
AlibabaVirTool:Win32/CeeInject.1d47aaa4
K7GWTrojan ( 0024cd1a1 )
Cybereasonmalicious.176cc9
BitDefenderThetaGen:NN.ZexaF.36250.vy1@aWTFsAai
VirITTrojan.Win32.Generic.BRDC
CyrenW32/Kolab.I.gen!Eldorado
SymantecTrojan.Zbot
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.PPT
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.IPZ.3
NANO-AntivirusTrojan.Win32.MLW.dtiqj
ViRobotTrojan.Win.Z.Ipz.344095.ANJ
AvastWin32:Inject-AKN [Trj]
TencentMalware.Win32.Gencirc.10bee3ca
EmsisoftGen:Heur.IPZ.3 (B)
BaiduWin32.Trojan.Kryptik.jd
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.MulDrop3.29364
VIPREGen:Heur.IPZ.3
TrendMicroTROJ_GEN.R002C0CEU23
McAfee-GW-EditionPWS-FABL!49BFC09176CC
Trapminemalicious.high.ml.score
SophosMal/Kolab-G
Ikaruspossible-Threat.Crypt
GDataGen:Heur.IPZ.3
JiangminTrojanSpy.SpyEyes.cbz
AviraTR/Dropper.Gen
Antiy-AVLTrojan[Spy]/Win32.Zbot
XcitiumTrojWare.Win32.Kryptik.PPT@4eljpb
ArcabitTrojan.IPZ.3
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Worm/Win.AutoRun.R582241
McAfeePWS-FABL!49BFC09176CC
MAXmalware (ai score=82)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0CEU23
RisingTrojan.Generic@AI.100 (RDML:LXLB9HM71wIhH19Bjr9igw)
YandexTrojan.GenAsa!ZA/63TP8oPY
FortinetW32/Wacatac.B!tr
AVGWin32:Inject-AKN [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Mal/Kolab-G?

Mal/Kolab-G removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment