Trojan.IgenericRI.S26222255 removal guide

The Trojan.IgenericRI.S26222255 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.IgenericRI.S26222255 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.IgenericRI.S26222255?


File Info:
name: DE6AD50DEF238AB56721.mlw
path: /opt/CAPEv2/storage/binaries/51228b5e2e0f95462687cc21070363e06a71f5b75c22bb39b286e507cf237c52
crc32: 3C3AAAD5
md5: de6ad50def238ab567216e3ca4f8082b
sha1: c1a63aedb46b076cfb8f521b09a4cf9512bf5949
sha256: 51228b5e2e0f95462687cc21070363e06a71f5b75c22bb39b286e507cf237c52
sha512: c8fe1d3ea90b46a4afe9d489d1b0f55dd645fe45d3fb57989e9dd4b6c557e38a2ab4203f6184f00aba7ed70cd723c642a118ae4b625c20f132a97297c6d0f12d
ssdeep: 768:Tt4unK5pnk4nGCBnan3am2B3ftjJWSSLQIYxH86BCMgWmdZ8J8tFWRJgf:T+uK5pn7A+11cNLFYRCMgWmdiuF8J
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15133F1E9BDE56A56DAE3453A438633A4527AF8CA3812DD27542D30E2FB627A118D7003
sha3_384: a086bda424e948d9806366391f224b77efe81139d95d15f1f886afd2bb296330ba815a7e9b83da5bdcabb501a10f31e8
ep_bytes: 64a130000000fc8d2424fcf9e8000000
timestamp: 2011-01-29 20:49:26

Version Info:
0: [No Data]

Trojan.IgenericRI.S26222255 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.47122
FireEye	Generic.mg.de6ad50def238ab5
CAT-QuickHeal	Trojan.IgenericRI.S26222255
ALYac	Gen:Variant.Midie.47122
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.def238
BitDefenderTheta	AI:Packer.8B451A5E1E
Cyren	W32/Cosmu.K.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Agent.OKR
TrendMicro-HouseCall	TROJ_KRYPTK.SM10
Avast	Win32:Agent-AMRX [Trj]
ClamAV	Win.Malware.Midie-9936226-0
BitDefender	Gen:Variant.Midie.47122
NANO-Antivirus	Virus.Win32.Gen.ccmw
Emsisoft	Gen:Variant.Midie.47122 (B)
TrendMicro	TROJ_KRYPTK.SM10
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.qc
Sophos	ML/PE-A + Mal/Inject-CG
eGambit	Unsafe.AI_Score_97%
Avira	TR/Crypt.ZPACK.Gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Midie.47122
AhnLab-V3	Trojan/Win.Gampass.R467614
McAfee	GenericRXAA-AA!DE6AD50DEF23
MAX	malware (ai score=88)
VBA32	Malware-Cryptor.Win32.General.4
Malwarebytes	Malware.AI.3766743511
APEX	Malicious
Rising	Malware.Heuristic!ET#93% (RDMK:cmRtazogVwIVGZuwkJdNcEp+7y89)
Yandex	Trojan.GenAsa!g4uRYh33TJE
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Cosmu.AO!tr
AVG	Win32:Agent-AMRX [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.IgenericRI.S26222255?

Trojan.IgenericRI.S26222255 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X