Malware

Mal/Generic-R + W32/Pidgeon-A removal tips

Malware Removal

The Mal/Generic-R + W32/Pidgeon-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-R + W32/Pidgeon-A virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Likely virus infection of existing system binary
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
wtqq.net

How to determine Mal/Generic-R + W32/Pidgeon-A?


File Info:

crc32: 821D1BB1
md5: a2c7cb0808132738359c189ca1a27ecb
name: A2C7CB0808132738359C189CA1A27ECB.mlw
sha1: c975a6c2aca9bd830ef202402fe5f0c160201d9b
sha256: 5be7fd83651ed090b834348b7d44843459da6763a3b0a87ffcf667da94d3b7e1
sha512: ef2122533ed6b724a1a59da54396988d4bb3d9d3a742457688d986ce05083fa2340792dc6993b6bead8629f64a782812066e1622debf4d3ed8749efc4528ae33
ssdeep: 12288:e2j1e/aVSHiMerK1pg5VkKofYA75US3bAeQYYSvbo/vRsv3HglZw5iERg2Roizk:F1e/aqJb1+Q77+Sakboniv/Xhzk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x6613x8bedx8a00x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

Mal/Generic-R + W32/Pidgeon-A also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0040f54a1 )
LionicHacktool.Win32.Krap.x!c
Elasticmalicious (high confidence)
DrWebWin32.HLLP.Yeli.1
CynetMalicious (score: 100)
CAT-QuickHealW32.Agent.E13
ALYacWin32.Prepender.Gen.1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0040f54a1 )
Cybereasonmalicious.808132
CyrenW32/Pidgeon.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Pidgeon.A
APEXMalicious
KasperskyPacked.Win32.Krap.g
BitDefenderWin32.Prepender.Gen.1
NANO-AntivirusVirus.Win32.Agent.dvixmz
MicroWorld-eScanWin32.Prepender.Gen.1
TencentVirus.Win32.Pidgeon.a
Ad-AwareWin32.Prepender.Gen.1
SophosMal/Generic-R + W32/Pidgeon-A
ComodoBackdoor.Win32.Hupigon.OHMP@4plqhq
BitDefenderThetaAI:FileInfector.7E8D3F1315
VIPREVirus.Win32.Pidgeon.a (v)
FireEyeGeneric.mg.a2c7cb0808132738
EmsisoftWin32.Prepender.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Packed.muka
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASBOL.C50C
ZoneAlarmPacked.Win32.Krap.g
GDataWin32.Trojan.PSE.136NMWS
AhnLab-V3Win32/Pidgeon.X1598
Acronissuspicious
MAXmalware (ai score=86)
VBA32Trojan-Downloader.EIC.7121
MalwarebytesPUP.Optional.ChinAd
PandaTrj/Genetic.gen
RisingPacker.Win32.Agent.f (CLASSIC)
YandexTrojan.GenAsa!Z47i8t73fdw
IkarusVirus.Win32.Agent
MaxSecureVirus.W32.Lamer.CL
FortinetW32/CoinMiner.BELF!tr
AVGWin32:Crypt-HXB [Drp]

How to remove Mal/Generic-R + W32/Pidgeon-A?

Mal/Generic-R + W32/Pidgeon-A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment