Malware

Win32:GenMalicious-BML [Trj] information

Malware Removal

The Win32:GenMalicious-BML [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32:GenMalicious-BML [Trj] virus can do?

  • Sample contains Overlay data
  • Unconventionial language used in binary resources: Polish
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Win32:GenMalicious-BML [Trj]?



File Info:

name: 003D01CBF96DF6EF7CEC.mlw
path: /opt/CAPEv2/storage/binaries/93e4effcdad9539623fb2e26ce26764d273cf5fcfe73988e4fe07808b0293454
crc32: 81C1BD8D
md5: 003d01cbf96df6ef7cec3ad8c1d6f179
sha1: d5db9aedae4380762a0b575821be50c57b139473
sha256: 93e4effcdad9539623fb2e26ce26764d273cf5fcfe73988e4fe07808b0293454
sha512: 86b357c8d9b6f4542e44d964a111b68d875422bfe6308c143ee7b441137e10dd28057ff98c2ef18f33e285fb534c69aa3a78a54e7f21da97102704ab70889dd6
ssdeep: 1536:Exf0u7snqMGGGMZZZyVb1t9e4GNqBvrPzO7/YiMIATcjil:Exf02+qbJ1y4GNq5jz+/YiMaa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15B44D04606337AA9D4A326F6837F673C4D0BDE3DE5F2406AB0C53A8A1BFD5042BC6116
sha3_384: 98c8d5e9f0e14d2c8c8b07d9945105f713faf251e7fce46cf7daf756bf2911c524fc623298eecae0f04721be024c7d85
ep_bytes: 558bec83ec448165ec0000000003c2f7
timestamp: 2001-07-15 02:59:58


Version Info:

CompanyName: Macromedia, Inc.
FileDescription: Macromedia Flash Player 7.0  r14
FileVersion: 7,0,14,0
InternalName: Macromedia Flash Player 7.0
LegalCopyright: Copyright © 1996-2003 Macromedia, Inc.
LegalTrademarks: Macromedia Flash Player
OriginalFilename: SAFlashPlayer.exe
ProductName: Shockwave Flash
ProductVersion: 7,0,14,0
Translation: 0x0409 0x04b0

Win32:GenMalicious-BML [Trj] also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Bredavi.lQCb
DrWebTrojan.Inject2.1137
CynetMalicious (score: 100)
FireEyeGeneric.mg.003d01cbf96df6ef
CAT-QuickHealTrojan.Ramnit.A
McAfeePWS-Zbot.gen.di
CylanceUnsafe
VIPREGen:Variant.Koobface.1
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderGen:Variant.Koobface.1
K7GWTrojan ( 004d291a1 )
K7AntiVirusTrojan ( 001f82c71 )
BitDefenderThetaGen:NN.ZexaF.34606.py1@a0EI3qcG
VirITBackdoor.Win32.Bredavi.DXR
CyrenW32/Ramnit.H.gen!Eldorado
SymantecPacked.Protexor!gen1
Elasticmalicious (high confidence)
ESET-NOD32Win32/Ramnit.A
TrendMicro-HouseCallWORM_PALEVO.SMGD
ClamAVWin.Virus.Sality-6724125-0
KasperskyBackdoor.Win32.Bredavi.dxr
NANO-AntivirusTrojan.Win32.Bredavi.cpftp
ViRobotBackdoor.Win32.A.Bredavi.123904
MicroWorld-eScanGen:Variant.Koobface.1
RisingBackdoor.Win32.Bredavi.a (CLASSIC)
Ad-AwareGen:Variant.Koobface.1
EmsisoftGen:Variant.Koobface.1 (B)
ComodoTrojWare.Win32.Kryptik.ILZ@39m3x2
BaiduWin32.Trojan.Nimnul.a
ZillyaBackdoor.Bredavi.Win32.1933
TrendMicroWORM_PALEVO.SMGD
McAfee-GW-EditionPWS-Zbot.gen.di
Trapminemalicious.high.ml.score
SophosML/PE-A + Mal/Ramnit-C
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Koobface.1
JiangminBackdoor/Bredavi.bky
AviraTR/Crypt.XPACK.Gen3
Antiy-AVLTrojan/Generic.ASBOL.DE0
ArcabitTrojan.Koobface.1
SUPERAntiSpywareTrojan.Agent/Gen-Kazy
MicrosoftTrojan:Win32/Ramnit
GoogleDetected
AhnLab-V3Backdoor/Win32.Bredavi.R11877
VBA32Malware-Cryptor.Win32.General.4
ALYacGen:Variant.Koobface.1
MAXmalware (ai score=88)
MalwarebytesTrojan.Crypt
PandaTrj/Pck_Pretorx.A
APEXMalicious
TencentTrojan.Win32.Agent.tcl
YandexBackdoor.Bredavi!cBlrbYQ4D6U
IkarusBackdoor.Win32.Bredavi
MaxSecureTrojan.Spy.Zbot.dnkl
FortinetW32/Kryptik.LW!tr
AVGWin32:GenMalicious-BML [Trj]
Cybereasonmalicious.bf96df
AvastWin32:GenMalicious-BML [Trj]

How to remove Win32:GenMalicious-BML [Trj]?

Win32:GenMalicious-BML [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment