Backdoor.Generic.467391 malicious file

The Backdoor.Generic.467391 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Generic.467391 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• Authenticode signature is invalid

How to determine Backdoor.Generic.467391?

File Info:
name: F76C45B2A5DB2D3B63E4.mlw
path: /opt/CAPEv2/storage/binaries/99fa3946c44a8ee294546ea37b524dc333ebc1a1114f834d8278da277a8b0c25
crc32: C1784BB4
md5: f76c45b2a5db2d3b63e41919c44b2772
sha1: e9ca0cfb642428b23c1f822b0ef95dffd4503bc3
sha256: 99fa3946c44a8ee294546ea37b524dc333ebc1a1114f834d8278da277a8b0c25
sha512: 1cdcb2f75b0d03285b34bf2fc053c074dbc1a79189f9159310a2955c033cf0c93a9fd9809717c6501448d80646977f92cfe06ec64879717482f1ab68e91a5073
ssdeep: 3072:jXudX0EkGVVv3x2TDEG62FgW862dSTB7T7OAlMNMLPjQoNrjvuJKRT:j+dEmVv3kToG613CVT7OxNMLPjQCW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18A44E15195E295B3C1A543334D8F376CF77E368162060729828C992E7DF3A9E3E0EB58
sha3_384: 0e789bb132cc1fb2119537da8763b7619931b11aef32bebfa1392e0f86ab39e2ef2b6332885a379f4e89b779ed467d24
ep_bytes: 6846466b748d4df05152ff75f4ff75e4
timestamp: 2004-07-30 19:15:16

Version Info:
0: [No Data]

Backdoor.Generic.467391 also known as:

How to remove Backdoor.Generic.467391?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.