Mal/Generic-R + Mal/EncPk-ADN (file analysis)

The Mal/Generic-R + Mal/EncPk-ADN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Mal/EncPk-ADN virus can do?

Possible date expiration check, exits too soon after checking local time
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Mal/Generic-R + Mal/EncPk-ADN?


File Info:
crc32: AC4DE48F
md5: 256d20d1a086fcc7ea015760c3652fc0
name: 256D20D1A086FCC7EA015760C3652FC0.mlw
sha1: a0121d704af9769f8f810269fff2f3edb47ecef1
sha256: 207a08ea78c4a6bacc47e16d98ef42ea45886c77a02d1ae73137f72613827ee0
sha512: 55d392461dea5db9c0a632bb5ec591ee7dd45635037d0f3738101f9eac77a817105ad31d84a77ef8b540c46210330bc006cb2ff9b9e09af0db6f5352ebd0cbf7
ssdeep: 3072:3snl4PFUvyfW7zAwWZvfEn6keD+MLPDOqStbMQwgNdNf7D:gOivyf7FvcwDxaMVC97D
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Bugreport x7248x6743x6240x6709
FileVersion: 1.0.0.0
CompanyName: Bugreport
Comments: Bugreport
ProductName: Bugreport
ProductVersion: 1.0.0.0
FileDescription: Bugreport
Translation: 0x0804 0x04b0

Mal/Generic-R + Mal/EncPk-ADN also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00521b151 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Mauvaise.SL1
Cylance	Unsafe
Sangfor	Suspicious.Win32.Evo.gen
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Trojan:Win32/EncPk.9975941b
K7GW	Trojan ( 00521b151 )
Cybereason	malicious.04af97
Cyren	W32/Heuristic-162!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
NANO-Antivirus	Virus.Win32.Agent.dvixmz
Tencent	Win32.Trojan.Strictor.Hqcb
Sophos	Mal/Generic-R + Mal/EncPk-ADN
Comodo	Malware@#2zjyfoxn96zeq
BitDefenderTheta	Gen:NN.ZexaF.34294.jq0@aOyoWnpb
McAfee-GW-Edition	BehavesLike.Win32.Koutodoor.ch
FireEye	Generic.mg.256d20d1a086fcc7
Emsisoft	Application.Generic (A)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1131665
eGambit	Unsafe.AI_Score_74%
Antiy-AVL	Trojan/Generic.ASMalwS.2821CE0
Microsoft	Trojan:Win32/Almanahe.R!MTB
AhnLab-V3	Trojan/Win32.Agent.R346837
McAfee	Flyagent.d
MAX	malware (ai score=99)
VBA32	BScope.Trojan.MulDrop
Malwarebytes	Malware.AI.1126069036
Panda	Trj/Genetic.gen
Rising	Packer.Win32.Agent.g (CLASSIC)
Yandex	Trojan.GenAsa!6xx30ZBLlcw
Ikarus	PUA.BlackMoon
Fortinet	W32/CoinMiner.BELF!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Mal/Generic-R + Mal/EncPk-ADN?

Mal/Generic-R + Mal/EncPk-ADN removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Mal/Generic-R + Mal/EncPk-ADN (file analysis)