Malware

Mal/Generic-R + Mal/TDSSPk-AE malicious file

Malware Removal

The Mal/Generic-R + Mal/TDSSPk-AE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-R + Mal/TDSSPk-AE virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Mal/Generic-R + Mal/TDSSPk-AE?


File Info:

name: 8A75EE384F1C2467FB7C.mlw
path: /opt/CAPEv2/storage/binaries/8c758c333782903d8cb1787d8f0b21967a652a444d51da03f355671592fcfcc3
crc32: A97DB700
md5: 8a75ee384f1c2467fb7ca16c44ca2fd6
sha1: ecdce762e27a1e3200aaf617517ac17d79e72da8
sha256: 8c758c333782903d8cb1787d8f0b21967a652a444d51da03f355671592fcfcc3
sha512: 6e9fc73d135ec9e86368a0d79bbb7331f6005ca1b4f661c264c0f8470de86f3fad637f8062468b3d8a4552c07cea360898b7a35a0be36dc8e98e3ea9df50235a
ssdeep: 6144:KbY3pmUsh8vTkmmrUOQGIS49lxMMRTr4aBKErDv1niLDqakaYlhZ3jLkdoU:0Y3pmRhVJYXx6QrZn1zZDU
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T11A84CE195DAAC815D2D209F641F0D3B9AABD99233D0EC023EB605CF6BA7CE8D2D045DD
sha3_384: fbd94d65727a4479dd133f52f67043f4bcb5b2ef70b0ff1108e38fbbde47897709b8d09c4c7e192fcfa728874db02b13
ep_bytes: 558bec6aff6820d1400068708a400064
timestamp: 2013-02-26 19:34:11

Version Info:

FileVersion: 8.0.0.0
ProductVersion: 8.0.0.0
FileDescription: Import Models into CM
CompanyName:
LegalCopyright:
ProductName: Alyx Adult Model Creator
Translation: 0x0000 0x04b0

Mal/Generic-R + Mal/TDSSPk-AE also known as:

BkavW32.AIDetect.malware2
McAfeeArtemis!8A75EE384F1C
CylanceUnsafe
SangforTrojan.Win32.Hatecrypt.1
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyUDS:DangerousObject.Multi.Generic
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0RKR21
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
SophosMal/Generic-R + Mal/TDSSPk-AE
WebrootW32.Trojan.Genkd
KingsoftWin32.Troj.GenericKD.v.(kcloud)
GridinsoftRansom.Win32.Occamy.sa
ViRobotTrojan.Win32.Z.Tdsspk.401662
MicrosoftTrojan:Win32/Occamy.C8C
BitDefenderThetaGen:NN.ZexaE.34294.yq3@aWHd4Oai
VBA32Trojan.Bitrep
TrendMicro-HouseCallTROJ_GEN.R002C0RKR21
RisingTrojan.Generic@ML.99 (RDML:y/dLT8alLlLuV5igGa3Vrg)
SentinelOneStatic AI – Suspicious PE
FortinetW32/TDSSPk.AE!tr
Cybereasonmalicious.84f1c2
PandaTrj/Genetic.gen

How to remove Mal/Generic-R + Mal/TDSSPk-AE?

Mal/Generic-R + Mal/TDSSPk-AE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment