How to remove “Backdoor.Generic.461970”?

The Backdoor.Generic.461970 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Generic.461970 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• Authenticode signature is invalid

How to determine Backdoor.Generic.461970?

File Info:
name: 14CFD6A28B9F485A8E04.mlw
path: /opt/CAPEv2/storage/binaries/fcf692d79e8bd8c372bcfd6da46220759fc81d0864c7340be4dff756f7480d63
crc32: 560F7417
md5: 14cfd6a28b9f485a8e04e3c16a38ad81
sha1: ac4b6d262b85818981fda5748183b2d4f77d774b
sha256: fcf692d79e8bd8c372bcfd6da46220759fc81d0864c7340be4dff756f7480d63
sha512: 1ed05158c5dfb1ca9cfd218c149b9c338033959f0d4b0a0575e27016d14a6415853944b96b78fb57f5ea9171ff4bce806244aebfe40b184901bba137c3b35e46
ssdeep: 3072:fMMkOFTU7DsYoV/tnMhED8c3kLw4d3NYDCZUvK/glRT:XVFosY4/2heTkc4o2+K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BA24E0A787D28DF7C2D503734CCB2A3FBA3A71408256072B458E592F74A27D6762AF14
sha3_384: b7ade71b0e9c45f501216dba496490f77a80be9b8c1d9ba314041d22478059dd1299bb21924b2149f09d44a5e510a552
ep_bytes: 68365300008d55e8528d4de0518d55f0
timestamp: 2005-09-07 12:10:54

Version Info:
0: [No Data]

Backdoor.Generic.461970 also known as:

How to remove Backdoor.Generic.461970?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.