Backdoor.Bancodor information

The Backdoor.Bancodor is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Bancodor virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor.Bancodor?

File Info:
name: 4D95E30759CFFF07B41A.mlw
path: /opt/CAPEv2/storage/binaries/77eb6bcbdeb63aec3f60fc433ab36b151d039503f400abd7c1bce8596342e1da
crc32: AAAF7361
md5: 4d95e30759cfff07b41a479f6606c7dd
sha1: 8f7f3a17a5f8f8b271ca7e023b39903a451db55a
sha256: 77eb6bcbdeb63aec3f60fc433ab36b151d039503f400abd7c1bce8596342e1da
sha512: 43771669bb992334934052e47db4ad22adf5328c86edde22b1e5ef5f359ffae86ae2d89b5bde038887383d70be7c93af2e3bf49be2551d82f4d4d2849ee8191c
ssdeep: 12288:vGrbgTTAqhZmKYYAxYTXAvubO8reMngT66imlsVATXUR:vZTkqjJYRxYEvUen66imlpTc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C0A412223D82E0F1F63A467482EB6AFF57488965C1639338CBCC9A54ED33E94652F1C5
sha3_384: 7708ffe309a84e0f8ff9c226ea5f7f312b8092ea757eca369304d91752363cd5c78c35daaeecc60a5c5ee1c651f497ea
ep_bytes: 5589e583ec08c7042401000000ff1588
timestamp: 2010-07-01 05:39:52

Version Info:
FileDescription: Protected Application
FileVersion: 1, 0, 0, 1
ProductVersion: 1, 0, 0, 1
Comments: Is protected with Teggo MoleBox 4.3029
Translation: 0x0000 0x04b0

Backdoor.Bancodor also known as:

How to remove Backdoor.Bancodor?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.