Win32:GenMalicious-MAU [PUP] removal tips

The Win32:GenMalicious-MAU [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:GenMalicious-MAU [PUP] virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:GenMalicious-MAU [PUP]?


File Info:
name: 44466BB050A81CE5E4CE.mlw
path: /opt/CAPEv2/storage/binaries/e7d8c53145c0c6220226d43e81f89a32bab2f80f398b6ee6914c985835f2098e
crc32: E59CCA5A
md5: 44466bb050a81ce5e4ce9cc0c18773b9
sha1: f1019928d4111949d2a143260f0f2fe12f23b843
sha256: e7d8c53145c0c6220226d43e81f89a32bab2f80f398b6ee6914c985835f2098e
sha512: 55c52efc2c1a35a3bde5b2be5c8baa696a4966f08d5dcadb75da404b824dc2451fc7c290ea0ecf8ee4b8c14ae1b95c0b2367675ae09c36f0ea2181aa131f1ba1
ssdeep: 192:Yp8970d5dqS5fyqRZXi0KDoxoVgJlDK17UHGmCLfFITCgNq5QpqLg7JdLX3JxH5e:Yp8md35KKM04hPx15cmmzFbnTEsU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T104D2DF22F2C53505D823B67AC616D9E9BE5E7F03770B9E0E354023AA8772E49DD0DC29
sha3_384: 61483e957b9c99e2138faba1b923a46d1abb05bf2e7b66bd8d1f605cdaf6c51c0a0dcc6666bd02fac9c82d3255e63a71
ep_bytes: 68d4124000e8eeffffff000000000000
timestamp: 2017-12-22 20:24:20

Version Info:
Translation: 0x0409 0x04b0
ProductName: Cabrito
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Cabrito
OriginalFilename: Cabrito.exe

Win32:GenMalicious-MAU [PUP] also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.VBNA.based
ClamAV	Win.Trojan.Zusy-6952025-0
CAT-QuickHeal	Trojan.WoreflintMF.S22387698
Skyhigh	BehavesLike.Win32.BadFile.mz
Cylance	unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	W32.Changeup
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
Sophos	ML/PE-A
Google	Detected
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!44466BB050A8
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware.AI.DDS
Rising	Worm.VBNA!8.2BE (TFE:5:ihhvxa03L3C)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Application
AVG	Win32:GenMalicious-MAU [PUP]
Avast	Win32:GenMalicious-MAU [PUP]

How to remove Win32:GenMalicious-MAU [PUP]?

Win32:GenMalicious-MAU [PUP] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X