Mal/Generic-R + W32/Shodi-L removal instruction

The Mal/Generic-R + W32/Shodi-L is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + W32/Shodi-L virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Mal/Generic-R + W32/Shodi-L?


File Info:
crc32: A5E5A9C7
md5: 265faab140cf1c9409b061777c9befb7
name: 265FAAB140CF1C9409B061777C9BEFB7.mlw
sha1: 8d618348bd30866eda5069814c81b0c4b84470c6
sha256: 2b5673d08111a6d164d13f0354c7be3c4733b64d4d9dad1f268753b75e944302
sha512: 0c1d4dec61473fb4540cab17086e5e4dbfa73339cd64a47eb28e8ff297745088c9f9291660938b68b6d1f2da4d78dae0f31bfe705805f4a83ce1a65684c69f23
ssdeep: 3072:DBTzyBZjVebaAWDhT8IdkWGqzjTAHQnbt:DBC7PAM1GqzPt
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Setup
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.17514
FileDescription: Welcome to Windows
OriginalFilename: SETUP.EXE
Translation: 0x0409 0x04b0

Mal/Generic-R + W32/Shodi-L also known as:

Elastic	malicious (high confidence)
DrWeb	modification of Win32.Virut.56
Zillya	Trojan.Sdum.Win32.517
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Virus ( 0057bf4d1 )
K7AntiVirus	Virus ( 0057bf4d1 )
APEX	Malicious
Avast	Win32:Vitro [Inf]
Kaspersky	UDS:Virus.Win32.Virut.ce
Sophos	Mal/Generic-R + W32/Shodi-L
McAfee-GW-Edition	RDN/Generic.hbg
FireEye	Generic.mg.265faab140cf1c94
Antiy-AVL	Trojan/Generic.ASVirus.303
McAfee	RDN/Generic.hbg
VBA32	Trojan.Wacatac
Rising	Virus.Shodi!1.9B9C (CLASSIC)
Ikarus	Trojan.Agent
MaxSecure	virus.shohdi.i
Fortinet	W32/Vitro.BBD9!tr
AVG	Win32:Vitro [Inf]

How to remove Mal/Generic-R + W32/Shodi-L?

Mal/Generic-R + W32/Shodi-L removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X