Categories: Malware

Mal/Generic-R + Mal/Bdoor-F removal

The Mal/Generic-R + Mal/Bdoor-F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Mal/Bdoor-F virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics
Uses Windows utilities for basic functionality
Uses Windows utilities for basic functionality
Sniffs keystrokes
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Created a process from a suspicious location
Installs itself for autorun at Windows startup
Installs itself for autorun at Windows startup
Creates a copy of itself
Creates known Njrat/Bladabindi RAT registry keys
Uses suspicious command line tools or Windows utilities

How to determine Mal/Generic-R + Mal/Bdoor-F?


File Info:
name: 20AC4CC456E1558753CA.mlwpath: /opt/CAPEv2/storage/binaries/4b13ed97e020b432aade014a49f98c441c1e5249b08f747044f0fbb8ea1025b8crc32: 9BE82D68md5: 20ac4cc456e1558753cae00c3cc18215sha1: df91be8fc6658295ef9b07edbbb409484de62decsha256: 4b13ed97e020b432aade014a49f98c441c1e5249b08f747044f0fbb8ea1025b8sha512: cffe12ca9bc89004e365b5f3e9bfc7fce67350294c0986e41d8db9d9a2652432e46d3648a1a434460be6a431e439ab92a79f2d00a3efd21f9ac05830db87e3b4ssdeep: 6144:6z8uRbwrnF/gBBrPjjj8SRkSYhqMgT7s9Tw:lSwrFWBrWDg8Etype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15B34CD26A679295ACF8D45F441D609CECFA447B3EBC2AE1117E46235B231EF8448F8C7sha3_384: ffa462e10e962413fa8702f8f1daebc305449597986bba230326393c4baae9e43a971975bfad19e394e3b8572f48a526ep_bytes: ff250020400000000000000000000000timestamp: 2016-09-23 01:03:35
Version Info:
0: [No Data]

Mal/Generic-R + Mal/Bdoor-F also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader18.40157
MicroWorld-eScan	Trojan.GenericKD.44755386
FireEye	Generic.mg.20ac4cc456e15587
ALYac	Trojan.GenericKD.44755386
Cylance	Unsafe
Zillya	Backdoor.SpyGate.Win32.1852
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004d83e91 )
Alibaba	Trojan:MSIL/Kryptik.061c92fa
K7GW	Trojan ( 004d83e91 )
Cybereason	malicious.456e15
BitDefenderTheta	Gen:NN.ZemsilF.34232.omW@aqM9Z5o
VirIT	Trojan.Win32.Banker.CGN
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Kryptik.EKU
TrendMicro-HouseCall	TROJ_GEN.R002C0RB622
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.44755386
NANO-Antivirus	Trojan.Win32.SpyGate.eqltwu
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10bac231
Ad-Aware	Trojan.GenericKD.44755386
Emsisoft	Trojan.GenericKD.44755386 (B)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0RB622
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Sophos	Mal/Generic-R + Mal/Bdoor-F
Ikarus	Trojan.MSIL.Crypt
GData	Trojan.GenericKD.44755386
Jiangmin	Backdoor.MSIL.nkd
Avira	TR/Dropper.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwS.1E761E1
Gridinsoft	Ransom.Win32.Bladabindi.sa
ViRobot	Trojan.Win32.Z.Spygate.237568.G
Microsoft	Backdoor:MSIL/Bladabindi
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Zapchast.C1875572
Acronis	suspicious
McAfee	Artemis!20AC4CC456E1
VBA32	Backdoor.MSIL.SpyGate
Malwarebytes	MachineLearning/Anomalous.100%
APEX	Malicious
Rising	Malware.Obfus/MSIL@AI.96 (RDM.MSIL:ecVwhqWiPosqegltGx+bqA)
Yandex	Backdoor.SpyGate!kWw09+1/Nxs
SentinelOne	Static AI – Malicious PE
eGambit	Generic.Malware
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen