Malware

About “Mal/Generic-R + Mal/Revet-A” infection

Malware Removal

The Mal/Generic-R + Mal/Revet-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-R + Mal/Revet-A virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Mal/Generic-R + Mal/Revet-A?


File Info:

crc32: 9D08E5A3
md5: c27671f8918a8dab7a62d5cb2610a84a
name: C27671F8918A8DAB7A62D5CB2610A84A.mlw
sha1: 5374d090cca0730bb48e1308c87ba1eb33d7474e
sha256: ce33e156cf93f70c1e265b51a623a040c42d54c90af89d701c55c4ecdb33e203
sha512: 0be78696c1924b9db2a88f2ad4fdd24cfe476a57561a03172ba845ddd8ca4d7e47f38f2083dff33a0a0e98ca4fcf5fe9b4bb8623600cd8c277decc89921ddd46
ssdeep: 384:sGDRfRriat5wSFSq1oEIPJvnbisVKE2yWLu2s2:sGF5riatNEQIRm/a2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Mal/Generic-R + Mal/Revet-A also known as:

Elasticmalicious (high confidence)
ClamAVWin.Trojan.RevengeRat-6344273-0
CAT-QuickHealTrojan.Rrat
Qihoo-360Win32/Trojan.85f
ALYacTrojan.MSIL.Revenge
MalwarebytesBackdoor.RevengeRAT.MSIL
ZillyaTrojan.Tpyn.Win32.32796
AegisLabTrojan.Win32.RRAT.4!c
SangforMalware
K7AntiVirusTrojan ( 700000121 )
BitDefenderGen:Variant.Cerbu.63098
K7GWTrojan ( 700000121 )
ArcabitTrojan.Cerbu.DF67A
CyrenW32/Revetrat.A.gen!Eldorado
SymantecTrojan.Revetrat
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.RRAT.gen
AlibabaBackdoor:MSIL/RevengeRat.5bb99752
MicroWorld-eScanGen:Variant.Cerbu.63098
RisingBackdoor.Revetrat!1.B8DA (CLASSIC)
Ad-AwareGen:Variant.Cerbu.63098
EmsisoftGen:Variant.Cerbu.63098 (B)
ComodoTrojWare.MSIL.Revetrat.A@7osjcj
F-SecureTrojan.TR/ATRAPS.Gen
DrWebBackDoor.RevetRat.2
TrendMicroBKDR_REVET.SM
McAfee-GW-EditionBehavesLike.Win32.Generic.lm
FireEyeGeneric.mg.c27671f8918a8dab
SophosMal/Generic-R + Mal/Revet-A
SentinelOneStatic AI – Malicious PE
AviraTR/ATRAPS.Gen
MAXmalware (ai score=100)
Antiy-AVLTrojan[Backdoor]/MSIL.RevengeRat
KingsoftWin32.Troj.Undef.(kcloud)
GridinsoftTrojan.Win32.Agent.oa
MicrosoftBackdoor:MSIL/RevengeRat.GA!MTB
ViRobotTrojan.Win32.Z.Revengerat.17408.JS
ZoneAlarmHEUR:Trojan.Win32.RRAT.gen
GDataGen:Variant.Cerbu.63098
McAfeeGenericRXEK-KS!C27671F8918A
VBA32TScope.Trojan.MSIL
CylanceUnsafe
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Agent.APN
TrendMicro-HouseCallBKDR_REVET.SM
TencentWin32.Trojan.Rrat.Swug
IkarusBackdoor-Rat.Revenge
eGambitTrojan.Generic
FortinetMSIL/RevengeRat.APN!tr
BitDefenderThetaGen:NN.ZemsilF.34700.biW@a4rzVre
AVGWin32:MalwareX-gen [Trj]
AvastWin32:MalwareX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (D)
MaxSecureTrojan.Malware.300983.susgen

How to remove Mal/Generic-R + Mal/Revet-A?

Mal/Generic-R + Mal/Revet-A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment