How to remove “Mal/Generic-R + Troj/PWS-CLT”?

The Mal/Generic-R + Troj/PWS-CLT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Troj/PWS-CLT virus can do?

Executable code extraction
Creates RWX memory
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

gamesboiler.com

ocsp.digicert.com

How to determine Mal/Generic-R + Troj/PWS-CLT?


File Info:
crc32: 2B04F205
md5: 5af0b1293204e66172b86ce757c75720
name: 5AF0B1293204E66172B86CE757C75720.mlw
sha1: f20d82a986d3a08adf3a0e11403b5d0af69e2b15
sha256: 1d12585e56d5e5bb2ae15c8d712713179c7eee57160a3a5428d8a79c0844b3f3
sha512: 0e67e7417f9c451a19db0f1fd6f7e94e939471979cfe7668a99273e924f4d7855355def0835cb913f60b9ea06314692594992745676fb523b8e9b438a149588a
ssdeep: 6144:oYQOMUdd5X1M5ACr3hoszLfwjLXVCWVPmXjTj/Svkf5bVJjq3MGMXmSUexc:o1OMUBdCr3iWfMAWVPmXjskhbVJLmUx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
ProductVers: 7.0.21.21
InternalNames: galimatimat
FileVers: 7.0.2.54
LegalCopyrighd: Jdfgl sfd
Translations: 0x0159 0x149f

Mal/Generic-R + Troj/PWS-CLT also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0057c2591 )
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.26450
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Stop.J1
ALYac	Trojan.GenericKD.36864430
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.3138386
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanPSW:Win32/ArkeiStealer.c096d8ee
K7GW	Trojan ( 0057c2591 )
Cybereason	malicious.986d3a
Cyren	W32/Kryptik.EAT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HKTZ
APEX	Malicious
Avast	Win32:BotX-gen [Trj]
ClamAV	Win.Malware.Bandook-9859703-1
Kaspersky	HEUR:Trojan-PSW.Win32.Tepfer.gen
BitDefender	Trojan.GenericKD.36864430
NANO-Antivirus	Trojan.Win32.Tepfer.ivfzcm
MicroWorld-eScan	Trojan.GenericKD.36864430
Ad-Aware	Trojan.GenericKD.36864430
Sophos	Mal/Generic-R + Troj/PWS-CLT
BitDefenderTheta	Gen:NN.ZexaF.34266.BCW@aejD6mlO
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.STOP.SMYXBGS
McAfee-GW-Edition	BehavesLike.Win32.Packed.gc
FireEye	Generic.mg.5af0b1293204e661
Emsisoft	Trojan.GenericKD.36864430 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.PSW.Tepfer.mpe
Webroot	W32.Malware.Gen
Avira	TR/AD.PredatorThief.pvcxg
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/ArkeiStealer.RT!MTB
GData	Trojan.GenericKD.36864430
AhnLab-V3	CoinMiner/Win.Glupteba.R419932
Acronis	suspicious
McAfee	Packed-GBF!5AF0B1293204
MAX	malware (ai score=89)
VBA32	BScope.Trojan.AET.281105
Malwarebytes	Trojan.MalPack
Panda	Trj/GdSda.A
Rising	Trojan.Kryptik!1.D58B (CLASSIC)
Ikarus	Trojan.Win32.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.EAT!tr
AVG	Win32:BotX-gen [Trj]
Paloalto	generic.ml

How to remove Mal/Generic-R + Troj/PWS-CLT?

Mal/Generic-R + Troj/PWS-CLT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X