Virus.Win32.Generic removal tips

The Virus.Win32.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Virus.Win32.Generic virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid
Created a process from a suspicious location
Anomalous binary characteristics

How to determine Virus.Win32.Generic?


File Info:
name: 9D0C07811497D86A7EF9.mlw
path: /opt/CAPEv2/storage/binaries/d8aa109ddc96c8bcbf4dde70796874818e39a5e88693f578fc91055633c48fb4
crc32: A89AA377
md5: 9d0c07811497d86a7ef9c523fdbf5bf3
sha1: a0b8df3870bf11482adb21adc53a1372c9e5d26d
sha256: d8aa109ddc96c8bcbf4dde70796874818e39a5e88693f578fc91055633c48fb4
sha512: 9a5c99a8e052b53ee945b8bf11ad447005adf87e9adf4580ee45a1c10cf5f9da262c2a7eb395a92f04a78e91d8b78ac8f45379680aa5edcd8ceb5b88501f36bd
ssdeep: 768:SS1USEvZ9ewMMQVbix5FCYiruZ2oNFYviSLo1rqRVm+:SSxqdFJiruZ9Nqo1rB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16E139F077CD9403BDB814AB025B25B264B3F161523592957FF4C5CAA3F736E8C82639B
sha3_384: 21a5698ac28a1a144f75bdac0fa83a6a6044770eed977debb8bb9dd6bc226856280f984363d959614d3c44fb2583a5ec
ep_bytes: 558bec6aff6800b14000683870400064
timestamp: 2019-09-03 19:30:19

Version Info:
0: [No Data]

Virus.Win32.Generic also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Win32.EquationKiller.1
MicroWorld-eScan	Win32.Triusor.A
FireEye	Generic.mg.9d0c07811497d86a
ALYac	Win32.Triusor.A
Cylance	Unsafe
VIPRE	Win32.Triusor.A
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Trojan ( 004f12f91 )
BitDefender	Win32.Triusor.A
K7GW	Trojan ( 004f12f91 )
Cybereason	malicious.11497d
Arcabit	Win32.Triusor.A
BitDefenderTheta	AI:FileInfector.AD9B3E700F
Cyren	W32/Resur.D.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Resur.I
TrendMicro-HouseCall	Virus.Win32.RESUR.A
ClamAV	Win.Malware.Triusor-9952497-0
Kaspersky	HEUR:Virus.Win32.Generic
NANO-Antivirus	Virus.Win32.Infector.eazaig
Rising	Virus.Resur!1.B42C (CLASSIC)
Ad-Aware	Win32.Triusor.A
Sophos	ML/PE-A
Comodo	TrojWare.Win32.Nimnul.A@5waoem
TrendMicro	Virus.Win32.RESUR.A
McAfee-GW-Edition	W32/Triusor.A
Emsisoft	Win32.Triusor.A (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen7
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
ZoneAlarm	HEUR:Virus.Win32.Generic
GData	Win32.Trojan.PSE.1U6M3NY
Cynet	Malicious (score: 100)
McAfee	W32/Triusor.A
VBA32	Virus.Win32.Triusor
Malwarebytes	Malware.AI.117771070
APEX	Malicious
Ikarus	Virus.Win32.Resur
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.FN
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Virus.Win32.Generic?

Virus.Win32.Generic removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X