Categories: Malware

About “Mal/Generic-R + Troj/Agent-AEUC” infection

The Mal/Generic-R + Troj/Agent-AEUC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Troj/Agent-AEUC virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Creates a slightly modified copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Mal/Generic-R + Troj/Agent-AEUC?


File Info:
crc32: D7BFA840md5: a0063f8960f976b6a56ce2831b34ae19name: A0063F8960F976B6A56CE2831B34AE19.mlwsha1: bafde121d67f8359ddebaf5c13ab86eceb6dccc7sha256: a7259b65a4acac8f1ef4a5cfdced39a996e97450944ac90a306b5ea71b727cc8sha512: f79fd079ce9a43e3e36e3e1ee12ca06d17ad00e6624d2d22a67bee0d615cdb447b1e12aa074d57bbc4ba9558558c670c3d0421b1aa0cd468686616861717ef6bssdeep: 24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsx5:dJ5gEKNikf3hBfUiWx5type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2010InternalName: go.exeFileVersion: 5.2.1.2CompanyName: MSx420xab CorpSpecialBuild: LegalTrademarks: LegalFileDescrsiption: gox421x2039.exeComments: ProductName: Gox421x2030ProductVersion: 5.2.1.3PrivateBuild: OriginalFilename: gog.exeTranslation: 0x0800 0x0026

Mal/Generic-R + Troj/Agent-AEUC also known as:

Bkav	W32.FamVT.GeND.Trojan
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad3.28161
ClamAV	Win.Downloader.Upatre-5744087-0
CAT-QuickHeal	TrojanDownloader.Upatre.A6
ALYac	Trojan.Agent.BAVE
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 004ebb4c1 )
K7AntiVirus	Trojan-Downloader ( 0040f6bd1 )
Baidu	Win32.Trojan.Kryptik.mp
Cyren	W32/Trojan.HEYR-7073
ESET-NOD32	Win32/TrojanDownloader.Small.AAB
Zoner	Trojan.Win32.19328
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Agent.BAVE
NANO-Antivirus	Trojan.Win32.Bublik.cqkilw
MicroWorld-eScan	Trojan.Agent.BAVE
Tencent	Malware.Win32.Gencirc.10b0799a
Ad-Aware	Trojan.Agent.BAVE
Sophos	Mal/Generic-R + Troj/Agent-AEUC
Comodo	TrojWare.Win32.Kryptik.BOZ@546pmn
F-Secure	Trojan.TR/Yarwi.AD.5
BitDefenderTheta	Gen:NN.ZexaF.34126.!y3@a41e4tb
VIPRE	Trojan.Win32.Zbot.o (v)
McAfee-GW-Edition	BehavesLike.Win32.Cutwail.fh
FireEye	Generic.mg.a0063f8960f976b6
Emsisoft	Trojan.Agent.BAVE (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Bublik.ggf
Avira	TR/Yarwi.AD.5
eGambit	RAT.Ammyy
Antiy-AVL	Trojan/Win32.Bublik
Kingsoft	Win32.Heur.KVMH015.a.(kcloud)
Microsoft	Trojan:Win32/Zbot.RT!MTB
Gridinsoft	Trojan.Win32.Agent.bot!s1
Arcabit	Trojan.Agent.BAVE
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Agent.BAVE
TACHYON	Trojan/W32.Agent.1025714
AhnLab-V3	Trojan/Win32.Upatre.R267453
Acronis	suspicious
McAfee	Cutwail-FDGO!A0063F8960F9
MAX	malware (ai score=83)
VBA32	Trojan.Download
Malwarebytes	Upatre.Trojan.Downloader.DDS
Panda	Generic Malware
Rising	Downloader.Waski!1.A489 (CLASSIC)
Yandex	Trojan.GenAsa!4FxEc4PI3eE
Ikarus	Trojan.Win32.Badur
MaxSecure	Win.MxResIcn.Heur.Gen
Fortinet	W32/Small.AAB!tr.dldr
AVG	Win32:TrojanX-gen [Trj]