Win32:GenMalicious-KB [Trj] removal guide

The Win32:GenMalicious-KB [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:GenMalicious-KB [Trj] virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid

How to determine Win32:GenMalicious-KB [Trj]?


File Info:
name: 029007D72D1624023407.mlw
path: /opt/CAPEv2/storage/binaries/536f75a132cc7617abe677cd7e50ece5f9219705dd51d8142ff9cafd9f42285f
crc32: 03BD6530
md5: 029007d72d16240234072e115171fa87
sha1: 37360aaf3d205ac4a4d7563b5d5eda2c7eb777ec
sha256: 536f75a132cc7617abe677cd7e50ece5f9219705dd51d8142ff9cafd9f42285f
sha512: bc5901ad95b4899c5078df00e9dbbcd9016706f733b3d4368ee362f45ecb679e305421e250ea4117cdd84fbd9fafeabe790fb8f1f16d047ff6d5dbbf9781f059
ssdeep: 1536:YApZ5IAn8ZxIA/ZFIApkAtmIOYWYSIAfZdIAZZZiIARZhx:NZqZJZzkuOYf6ZvZGZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CFF3B41272A8D0D6F1159138CCE9DFBA14E5AC326E188D07BBC1BB4F3BB86817D91257
sha3_384: 17349361fed209f7c9e5d0e536e2d78fce1446dc6735552da73a4f868e99c0b3c4a3417de53419e9fa5255b943b5ef46
ep_bytes: 68500a4100e8f0ffffff000000000000
timestamp: 2014-08-13 17:29:46

Version Info:
Translation: 0x0409 0x04b0
Comments: OnlineHile.Com-Count
CompanyName: OnlineHile.Com-Count
FileDescription: OnlineHile.Com-Count
LegalCopyright: OnlineHile.Com-Count
LegalTrademarks: OnlineHile.Com-Count
ProductName: OnlineHile.Com-Count
FileVersion: 1.00
ProductVersion: 1.00
InternalName: BuyPazarBot
OriginalFilename: BuyPazarBot.exe

Win32:GenMalicious-KB [Trj] also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
Skyhigh	GenericR-IYH!029007D72D16
McAfee	GenericR-IYH!029007D72D16
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Trojan.Win32.Agent.Vblx
CrowdStrike	win/malicious_confidence_60% (D)
BitDefenderTheta	AI:Packer.12B1CC9621
APEX	Malicious
ClamAV	Win.Dropper.Gamehack-7667035-0
Avast	Win32:GenMalicious-KB [Trj]
Ikarus	Virus.Win32.VBInject
Kingsoft	malware.kb.a.996
Google	Detected
TrendMicro-HouseCall	TROJ_GEN.R002H06LK23
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.3411146.susgen
AVG	Win32:GenMalicious-KB [Trj]
Cybereason	malicious.f3d205
DeepInstinct	MALICIOUS

How to remove Win32:GenMalicious-KB [Trj]?

Win32:GenMalicious-KB [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X