Categories: Malware

W32/Pidgeon-A removal

The W32/Pidgeon-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What W32/Pidgeon-A virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Starts servers listening on 0.0.0.0:666
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Tries to unhook or modify Windows functions monitored by Cuckoo
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

tools.lvdp.net

How to determine W32/Pidgeon-A?


File Info:
crc32: 11D479CCmd5: 42515baa21e7ad72744c50b913d1ba5cname: ____________1.4.exesha1: 1eba732417f7140984e08b861ec5baa0d7ed7826sha256: 097b46ff22274a251371c08506a41584e803b6568b15b80f82522ebe5c5c03f8sha512: 659cdaf2e56454cacd56c5673569f9b17c6f6e3bf5dce7c55e73e85c39a1ba5d01844ea47307930d273738299077105ffe3fd84d322f6f2248e68f5aab8bdd44ssdeep: 24576:1lbHHQmz5/X4n3dOU8DJYIGHOGA65OrwUl/1cVNGRxLmMScvRB:1BZ5/X4nElGdywUZ1+WTNtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x8f6fx4ef6x7531x4e91x8a00x79d2x8d5ex7f51xff1awww.lxzan.comx514dx8d39x53d1x5e03x4f7fx7528xff0cx76d7x7248x5fc5x7a76x3002

x8f6fx4ef6x7981x6b62x7531x4e8ex975ex6cd5x7528x9014xff0cx5426x5219x4e00x5207x540ex679cx7531x4f7fx7528x8005x627fx5f53x3002FileVersion: 1.1.0.0CompanyName: Yunyan x4e91x8a00Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)ProductName: x7f51x5740x76d1x63a7x8f6fx4ef6ProductVersion: 1.1.0.0FileDescription: x8f6fx4ef6x7531x4e91x8a00x79d2x8d5ex7f51xff1awww.lxzan.comx514dx8d39x53d1x5e03x4f7fx7528xff0cx76d7x7248x5fc5x7a76x3002

x8f6fx4ef6x7981x6b62x7531x4e8ex975ex6cd5x7528x9014xff0cx5426x5219x4e00x5207x540ex679cx7531x4f7fx7528x8005x627fx5f53x3002Translation: 0x0804 0x04b0

W32/Pidgeon-A also known as:

Bkav	HW32.Packed.DC05
McAfee	Flyagent
K7AntiVirus	Adware ( 004b8cf91 )
K7GW	Adware ( 004b8cf91 )
Symantec	Heur.AdvML.C
ESET-NOD32	a variant of Win32/FlyStudio.Packed.AD potentially unwanted
Avast	Win32:Malware-gen
GData	Win32.Trojan.Agent.MD8TC5
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Virus.Win32.Agent.dvixmz
AegisLab	Troj.W32.Generic!c
Comodo	Packed.Win32.MUPX.Gen
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R00JC0PFH16
McAfee-GW-Edition	BehavesLike.Win32.Pate.tc
Sophos	W32/Pidgeon-A
Cyren	W32/Trojan.MVCM-1298
Jiangmin	Packed.Multi.asd
Avira	TR/Agent.xoya
Antiy-AVL	Trojan[:HEUR]/Win32.AGeneric
AhnLab-V3	Win-Trojan/Malpacked5.Gen
AVware	Trojan.Win32.Generic!BT
Tencent	Win32.Trojan.Qqthief.Auto
Ikarus	Virus.Win32.OnLineGames
Fortinet	W32/OnLineGames.AJN!tr
Panda	Trj/CI.A
Qihoo-360	Win32/Trojan.01f