Backdoor

Backdoor.Win32.Mokes.anhj removal

Malware Removal

The Backdoor.Win32.Mokes.anhj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Mokes.anhj virus can do?

  • Executable code extraction
  • The binary likely contains encrypted or compressed data.
  • Detects Sandboxie through the presence of a library
  • Detects Avast Antivirus through the presence of a library
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Backdoor.Win32.Mokes.anhj?


File Info:

crc32: 46BB6991
md5: 8192bbee40ed53c75c74575bc3df9192
name: 8192BBEE40ED53C75C74575BC3DF9192.mlw
sha1: 2ee688a081ae83dd2e20000644fd00ce40dd1fa9
sha256: 2db30c380caac4e05f730b13a2933ca9189a5653071fb236ace9a98b978d74d0
sha512: 8f2e98654f3dacd2cbe09cf97b0ac2e9808aa917bda3b544ec279ac3d990be51061ce33e87a95dc9c9e4b58586d00c749850a1fd45ea9d97f524f54e38ebb615
ssdeep: 768:AG8y9PythqG8sqxpY3zNIPaFLGGqRyaVPh:cGy8sqAzWwqRD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Backdoor.Win32.Mokes.anhj also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00536d121 )
Elasticmalicious (high confidence)
McAfeeArtemis!8192BBEE40ED
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 00536d121 )
Cybereasonmalicious.e40ed5
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Smokeloader.J
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Mokes.anhj
BitDefenderGen:Trojan.Heur.beW@J8n8!qc
MicroWorld-eScanGen:Trojan.Heur.beW@J8n8!qc
Ad-AwareGen:Trojan.Heur.beW@J8n8!qc
SophosML/PE-A + Mal/Behav-204
BitDefenderThetaAI:Packer.C72A2F4D1B
VIPRETrojan.Win32.Winwebsec.m (v)
TrendMicroPossible_Virus
McAfee-GW-EditionBehavesLike.Win32.VirRansom.mc
FireEyeGeneric.mg.8192bbee40ed53c7
EmsisoftGen:Trojan.Heur.beW@J8n8!qc (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmBackdoor.Win32.Mokes.anhj
GDataGen:Trojan.Heur.beW@J8n8!qc
AhnLab-V3Trojan/Win32.Smokeldr.C3129113
Acronissuspicious
VBA32BScope.TrojanPSW.Spy
MAXmalware (ai score=86)
TrendMicro-HouseCallPossible_Virus
RisingTrojan.Generic@ML.100 (RDML:umDJ5p6WQh2bKWVKNoGsmQ)
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Trojan-gen
Qihoo-360HEUR/QVM19.1.4B4F.Malware.Gen

How to remove Backdoor.Win32.Mokes.anhj?

Backdoor.Win32.Mokes.anhj removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment