About “Win32:GenMalicious-HFA [Trj]” infection

The Win32:GenMalicious-HFA [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:GenMalicious-HFA [Trj] virus can do?

• Sample contains Overlay data
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Win32:GenMalicious-HFA [Trj]?

File Info:
name: AFDDEC4719FF124F44AA.mlw
path: /opt/CAPEv2/storage/binaries/9912b9c51abffd6f31b229f2dd590e5d46aae0b29b50b58c5d76204c37900388
crc32: 2237CB5D
md5: afddec4719ff124f44aa5be1af36c1a0
sha1: e3524185220a3e1b2cbf20a7ca285e755878a0a7
sha256: 9912b9c51abffd6f31b229f2dd590e5d46aae0b29b50b58c5d76204c37900388
sha512: 361ae813cd5c65f51fa2ddd0998c4a25102dba5046a4b493b1198594dcbb91c43c58fc6cd739de1737144dca2bc2b0c7977fb7fdaf0fec39b6d07ccfe848ac24
ssdeep: 1536:8ZJ8gcK8ossZDulaPnPuhkvJstZ5Kn+zyhCuyvQkgB54vLGsO:8ZJ8gJscuAnU+J9+2hCugeXHsO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T198D30B43622BE1E4E42C8876594771F51BCA5C615E0FAE253058BF373C722E47E1AA2B
sha3_384: c94c5a41cba0c755e191d97456909cb6a8792eaa4698e745240c2910d3f7cdcd890ada96126671ed5f918ec2253edb14
ep_bytes: 60be00b046008dbe0070f9ff4789e5c5
timestamp: 2011-01-04 13:49:16

Version Info:
0: [No Data]

Win32:GenMalicious-HFA [Trj] also known as:

How to remove Win32:GenMalicious-HFA [Trj]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.