Malware

Should I remove “Mal/Generic-R + Troj/Agent-BGBV”?

Malware Removal

The Mal/Generic-R + Troj/Agent-BGBV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-R + Troj/Agent-BGBV virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine Mal/Generic-R + Troj/Agent-BGBV?


File Info:

name: BAA655AF216F23F382D0.mlw
path: /opt/CAPEv2/storage/binaries/56f3a7504add8d0eb91c631cd9782fd001ead089feb8753a1eacc094b6848048
crc32: CD31982D
md5: baa655af216f23f382d073c7a3b24dd8
sha1: 3268647aaa93206f8e938e86a21133693c72bad1
sha256: 56f3a7504add8d0eb91c631cd9782fd001ead089feb8753a1eacc094b6848048
sha512: 9ae5b42db7dee484327e045a74fe2224bb04ac6f87dbfa92903cf517e671bb1979665ccbfd89804d11eeca91080a05e0fe989e72e86cefa21331193615843cde
ssdeep: 12288:di+6Ff+IueN4Hdveh6AansoPBUWKCqFfFTg+ftXb8BQyhY+:di+yGIfxMnNZUP3hNfpbgzS+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192F46B36B7C1C037E06300739958A2B941ADBF7149369647BBC86F0E6FB91C2E925B53
sha3_384: 2942d915bdde1df626a881e9db4dccb2c788dc24b9464b70b2cabb29ed030f866c7760214b1c7d1131804b46369b7b65
ep_bytes: e806270100e97ffeffff558bec83ec20
timestamp: 2020-06-25 14:56:26

Version Info:

0: [No Data]

Mal/Generic-R + Troj/Agent-BGBV also known as:

LionicAdware.Win32.Generic.2!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.399043
FireEyeGeneric.mg.baa655af216f23f3
ALYacGen:Variant.Zusy.399043
CylanceUnsafe
ZillyaAdware.Neoreklami.Win32.23342
SangforTrojan.Win32.Wacatac.C
BitDefenderGen:Variant.Zusy.399043
Cybereasonmalicious.f216f2
CyrenW32/Neoreklami.B.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Adware.Neoreklami.GX
APEXMalicious
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:AdWare.Win32.Neoreklami.gen
AlibabaAdWare:Win32/Neoreklami.cc5bc0f5
NANO-AntivirusRiskware.Win32.Neoreklami.hvifsk
TencentWin32.Adware.Generic.Phzy
Ad-AwareGen:Variant.Zusy.399043
SophosMal/Generic-R + Troj/Agent-BGBV
ComodoApplicUnwnt@#23s42a9z9s90x
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.PUPXBV.bh
EmsisoftGen:Variant.Zusy.399043 (B)
IkarusPUA.Neoreklami
JiangminAdWare.Generic.vfem
AviraHEUR/AGEN.1106534
MAXmalware (ai score=85)
Antiy-AVLTrojan/Generic.ASMalwS.320467D
MicrosoftPUA:Win32/Vigua.A
GDataGen:Variant.Zusy.399043
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.Neoreklami.C3600851
McAfeePUP-XBV-NT
VBA32BScope.Trojan.BPlug
MalwarebytesAdware.Neoreklami
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.100 (RDML:6aOXKG37vo0SywPSJo2j6Q)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/Neoreklami
BitDefenderThetaGen:NN.ZexaF.34084.SuW@aubOj!pi
AVGWin32:Adware-gen [Adw]
AvastWin32:Adware-gen [Adw]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Mal/Generic-R + Troj/Agent-BGBV?

Mal/Generic-R + Troj/Agent-BGBV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment