About “Win32:GenMalicious-HRY [Trj]” infection

The Win32:GenMalicious-HRY [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:GenMalicious-HRY [Trj] virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32:GenMalicious-HRY [Trj]?


File Info:
name: 224F3E66E930AA826A76.mlw
path: /opt/CAPEv2/storage/binaries/00ccb2a27f63a91a5b4df814445a804c75919d3f615edf528e61c4df35c38cbc
crc32: 6007A515
md5: 224f3e66e930aa826a762ca48dc68b18
sha1: cc959f9d683dc5ea045ca255f0a001f7a5a1e090
sha256: 00ccb2a27f63a91a5b4df814445a804c75919d3f615edf528e61c4df35c38cbc
sha512: 5c64a55a178597d45b9580471b6b06bac3aa6336e625d59d0f4bc84e6789f358a673e4f915d3844e43ff992f3a0935012dd69ea86bf49c0c4e0b9aee50799d24
ssdeep: 384:F3QB+M3PnQoHDCpHf4I4QwdcJY3nrBQQBTvtcXpKDJR:Zm/QojCpHfxO3rB9vtd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T114034943EB01C0F2C7DADBB1416BA828491ABE33EA5315A237457B6B7C317435923A1F
sha3_384: ea1db18bacc5ffc640afcf35b1a8dc03639c354a74c1e2ad4f8cee3ebf6b673e0b496df482602d8d117d2439b6a36362
ep_bytes: 00663d33c0baac2e400068d2104000c3
timestamp: 2008-05-23 01:17:07

Version Info:
0: [No Data]

Win32:GenMalicious-HRY [Trj] also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
Skyhigh	BehavesLike.Win32.Generic.pt
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Worm.Win32.VB.B1uv3
Cybereason	malicious.d683dc
Symantec	Trojan.Bludiz
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Trojan.Agent-1388714
NANO-Antivirus	Trojan.Win32.Fsysna.fuzcvt
Rising	Trojan.Agent!1.9CB4 (CLASSIC)
Sophos	ML/PE-A
Baidu	Win32.Worm.VB.g
F-Secure	Trojan.TR/VB.dbi
DrWeb	BackDoor.Tdss
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.224f3e66e930aa82
Ikarus	Trojan.Agent
Jiangmin	Trojan.Fsysna.nsq
Google	Detected
Avira	TR/VB.dbi
Antiy-AVL	Worm/Win32.AutoRun
Kingsoft	malware.kb.b.956
Microsoft	Worm:Win32/Autorun.XFV
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win.AutoRun.R618727
Acronis	suspicious
DeepInstinct	MALICIOUS
Cylance	unsafe
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Generic.AC.41B5AB!tr
AVG	Win32:GenMalicious-HRY [Trj]
Avast	Win32:GenMalicious-HRY [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32:GenMalicious-HRY [Trj]?

Win32:GenMalicious-HRY [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X