Categories: Backdoor

Backdoor.Agent.ABIH removal tips

The Backdoor.Agent.ABIH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Agent.ABIH virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Backdoor.Agent.ABIH?


File Info:
name: DF969619D5610A1D925E.mlwpath: /opt/CAPEv2/storage/binaries/4aeeb2397a777e583dd6894cbd3a43115979ea4314588232aaa5d0e2c277eacbcrc32: 95D9FDFBmd5: df969619d5610a1d925e2a950aace800sha1: 9cdcb3657ed98c34675c0f6ec5551a0f871100c0sha256: 4aeeb2397a777e583dd6894cbd3a43115979ea4314588232aaa5d0e2c277eacbsha512: 0e63e0501627d3983d3837a632478f43916eff700b94403974f57d216353753ff49d36f58ef16a94316923598ece566b2eff71509af13a5b743d101de3b7b2bcssdeep: 6144:TuR0w3zCCZk+jTXzhWb22z+J22RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/+:dwBh72z+82EB0NxDIBuOFe7/uTtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CC74E0693F63A13ECB54B8315D7267F919981A3E0C34E70BC6D05E0A35BC599AAF1383sha3_384: ba409291108121b55dd12e84fa198d2f80765d35946bfc2266bbcbc94d706e58ff01140559667aa5fa7177df7c661591ep_bytes: 558bec83ec708365ec008365cc008365timestamp: 2002-08-27 23:08:30
Version Info:
0: [No Data]

Backdoor.Agent.ABIH also known as:

Bkav	W32.DownloadBootestB.PE
Lionic	Virus.Win32.Kate.l4Cs
MicroWorld-eScan	Backdoor.Agent.ABIH
CAT-QuickHeal	W32.Agent.DB
Skyhigh	BehavesLike.Win32.Generic.fc
McAfee	W32/Fujacks.be
Cylance	unsafe
Zillya	Virus.Bototer.Win32.1
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Virus ( 001342bc1 )
Alibaba	Virus:Win32/Bototer.ec5b1762
K7GW	Virus ( 001342bc1 )
Cybereason	malicious.9d5610
Baidu	Win32.Virus.Otwycal.b
VirIT	Win32.Diliman.A
Symantec	W32.Fujacks.CE!inf
Elastic	malicious (high confidence)
ESET-NOD32	Win32/AutoRun.NAY
APEX	Malicious
TrendMicro-HouseCall	PE_DOWN.A
ClamAV	Win.Virus.Jadtre-4
Kaspersky	Virus.Win32.Bototer.a
BitDefender	Backdoor.Agent.ABIH
NANO-Antivirus	Virus.Win32.Agent.lxau
Avast	Win32:AutoRun-BFB [Trj]
Tencent	Virus.Win32.Dropper.a
Sophos	W32/Jadtre-B
Google	Detected
F-Secure	Malware.W32/Diliman.B
DrWeb	BackDoor.IRC.NgrBot.42
VIPRE	Backdoor.Agent.ABIH
TrendMicro	PE_DOWN.A
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.df969619d5610a1d
Emsisoft	Backdoor.Agent.ABIH (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Win32/PatchFile.ey
Varist	W32/Trojan.BGLD-6011
Avira	W32/Diliman.B
Antiy-AVL	Virus/Win32.Bototer.a
Kingsoft	Win32.TcAgent.o.1363968
Microsoft	Worm:Win32/Dorkbot.I
Xcitium	MalCrypt.Indus!@1qrzi1
Arcabit	Backdoor.Agent.ABIH
ViRobot	Win32.Agent.G
ZoneAlarm	Virus.Win32.Bototer.a
GData	Win32.Virus.Booter.A
Cynet	Malicious (score: 100)
AhnLab-V3	Win32/Jadtre.B
VBA32	SScope.Trojan.FakeAV.01724
ALYac	Backdoor.Agent.ABIH
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware.AI.DDS
Panda	W32/Bototer.A
Zoner	Probably Heur.ExeHeaderL
Rising	Virus.Jadtre!1.9BE3 (CLASSIC)
Yandex	Trojan.GenAsa!rxd8caYo9fY
Ikarus	Worm.Win32.Dorkbot
MaxSecure	Virus.W32.Bototer.A
Fortinet	W32/Injector.ABXY!tr
BitDefenderTheta	AI:FileInfector.EE1607460F
AVG	Win32:AutoRun-BFB [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Worm:Win/Allaple