Categories: Malware

Mal/Generic-R + W32/Neshta-D removal

The Mal/Generic-R + W32/Neshta-D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-R + W32/Neshta-D virus can do?

  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Likely virus infection of existing system binary
  • Anomalous binary characteristics

How to determine Mal/Generic-R + W32/Neshta-D?


File Info:

crc32: 5544F012md5: ec022f92355ae58272bffc434a595badname: EC022F92355AE58272BFFC434A595BAD.mlwsha1: d6e945a955beadf7fbc384d0df68d83cb1000c1csha256: 47af206f5b28365c01eb80fa135f1acb09f99ea37dd9c2ad23d5c7f359f29e0fsha512: 6f8e264f1643e8735a26add89cd5376bc538a1616da77ed53383ef5a708c1a159ba4b037a1d965372f41f460fa61402786de11c39e381619ae3a482dcbd24359ssdeep: 3072:sr85C9w9YAJOzIY9gVl01T2ENipdDg0z5dNLOpnhTd2:k9697JSIFl0QENqFdNLYd2type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Mal/Generic-R + W32/Neshta-D also known as:

Bkav W32.NeshtaB.PE
K7AntiVirus Virus ( 00556e571 )
Lionic Virus.Win32.Neshta.tn9H
Elastic malicious (high confidence)
DrWeb Win32.HLLP.Neshta
Cynet Malicious (score: 100)
CAT-QuickHeal W32.Neshta.C8
ALYac Win32.Neshta.A
Cylance Unsafe
Zillya Virus.Neshta.Win32.1
Sangfor Win.Trojan.Neshuta-1
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Virus:Win32/Neshta.3bb
K7GW Virus ( 00556e571 )
Cybereason malicious.2355ae
Baidu Win32.Virus.Neshta.a
Cyren W32/Neshta.OBIX-2981
Symantec W32.Neshuta
ESET-NOD32 Win32/Neshta.A
Zoner Virus.Win32.19514
APEX Malicious
Avast Win32:Apanas [Trj]
ClamAV Win.Trojan.Neshuta-1
Kaspersky Virus.Win32.Neshta.a
BitDefender Win32.Neshta.A
NANO-Antivirus Trojan.Win32.Winlock.fmobyw
ViRobot Win32.Neshta.Gen.A
MicroWorld-eScan Win32.Neshta.A
Tencent Virus.Win32.Neshta.a
Ad-Aware Win32.Neshta.A
Sophos Mal/Generic-R + W32/Neshta-D
Comodo Win32.Neshta.A@3ypg
BitDefenderTheta AI:FileInfector.D5C3B0640E
VIPRE Virus.Win32.Neshta.a (v)
TrendMicro PE_NESHTA.A
McAfee-GW-Edition BehavesLike.Win32.HLLP.ch
FireEye Generic.mg.ec022f92355ae582
Emsisoft Win32.Neshta.A (B)
SentinelOne Static AI – Malicious PE
Jiangmin Virus.Neshta.a
Avira W32/Neshta.A
eGambit Unsafe.AI_Score_99%
Antiy-AVL Trojan/Generic.ASVirus.20D
Kingsoft Win32.Infected.neshta.nl.(kcloud)
Microsoft Virus:Win32/Neshta.A
Gridinsoft Virus.Win32.Neshta.ka!s8
Arcabit Win32.Neshta.A
GData Win32.Virus.Neshta.D
TACHYON Virus/W32.Neshta
AhnLab-V3 Win32/Neshta
Acronis suspicious
McAfee W32/HLLP.41472.e
MAX malware (ai score=89)
VBA32 Virus.Win32.Neshta.a
Malwarebytes AveMaria.Backdoor.Stealer.DDS
Panda W32/Neshta.A
TrendMicro-HouseCall PE_NESHTA.A
Rising Stealer.AveMaria!1.BA1C (CLASSIC)
Yandex Trojan.GenAsa!Mo0tdcmmg3o
Ikarus Virus.Win32.Neshta
MaxSecure Virus.Infector.Gen9
Fortinet W32/Generic.AC.171!tr
AVG Win32:Apanas [Trj]
Paloalto generic.ml
Qihoo-360 Virus.Win32.Neshta.B

How to remove Mal/Generic-R + W32/Neshta-D?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Razy.665944 removal

The Razy.665944 is considered dangerous by lots of security experts. When this infection is active,…

10 mins ago

Symmi.3599 removal instruction

The Symmi.3599 is considered dangerous by lots of security experts. When this infection is active,…

10 mins ago

Malware.AI.73035705 information

The Malware.AI.73035705 is considered dangerous by lots of security experts. When this infection is active,…

11 mins ago

Nemesis.23220 information

The Nemesis.23220 is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Trojan.Downloader.JQBY removal

The Trojan.Downloader.JQBY is considered dangerous by lots of security experts. When this infection is active,…

25 mins ago

Win32/TrueUpdate.D potentially unsafe removal tips

The Win32/TrueUpdate.D potentially unsafe is considered dangerous by lots of security experts. When this infection…

31 mins ago