Categories: Backdoor

Backdoor.Generic.467391 malicious file

The Backdoor.Generic.467391 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Generic.467391 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Russian
  • Authenticode signature is invalid

How to determine Backdoor.Generic.467391?


File Info:

name: F76C45B2A5DB2D3B63E4.mlwpath: /opt/CAPEv2/storage/binaries/99fa3946c44a8ee294546ea37b524dc333ebc1a1114f834d8278da277a8b0c25crc32: C1784BB4md5: f76c45b2a5db2d3b63e41919c44b2772sha1: e9ca0cfb642428b23c1f822b0ef95dffd4503bc3sha256: 99fa3946c44a8ee294546ea37b524dc333ebc1a1114f834d8278da277a8b0c25sha512: 1cdcb2f75b0d03285b34bf2fc053c074dbc1a79189f9159310a2955c033cf0c93a9fd9809717c6501448d80646977f92cfe06ec64879717482f1ab68e91a5073ssdeep: 3072:jXudX0EkGVVv3x2TDEG62FgW862dSTB7T7OAlMNMLPjQoNrjvuJKRT:j+dEmVv3kToG613CVT7OxNMLPjQCWtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18A44E15195E295B3C1A543334D8F376CF77E368162060729828C992E7DF3A9E3E0EB58sha3_384: 0e789bb132cc1fb2119537da8763b7619931b11aef32bebfa1392e0f86ab39e2ef2b6332885a379f4e89b779ed467d24ep_bytes: 6846466b748d4df05152ff75f4ff75e4timestamp: 2004-07-30 19:15:16

Version Info:

0: [No Data]

Backdoor.Generic.467391 also known as:

Bkav W32.AIDetect.malware2
Lionic Hacktool.Win32.Krap.x!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
FireEye Generic.mg.f76c45b2a5db2d3b
McAfee Artemis!F76C45B2A5DB
Cylance Unsafe
Zillya Trojan.Kryptik.Win32.904267
Sangfor Trojan.Win32.Crypto.8
Alibaba TrojanPSW:Win32/Kryptik.1983f015
CrowdStrike win/malicious_confidence_100% (W)
VirIT Backdoor.Win32.Qbot.KR
Symantec Trojan.Zbot
ESET-NOD32 a variant of Win32/Kryptik.HBMX
APEX Malicious
Paloalto generic.ml
Kaspersky Packed.Win32.Krap.ae
BitDefender Backdoor.Generic.467391
NANO-Antivirus Trojan.Win32.Krap.ebzbxc
MicroWorld-eScan Backdoor.Generic.467391
Avast Win32:Cybota [Trj]
Tencent Win32.Packed.Krap.Edds
Ad-Aware Backdoor.Generic.467391
Emsisoft Backdoor.Generic.467391 (B)
DrWeb BackDoor.Qbot.277
VIPRE Packed.Win32.Zbot.gen.y.7 (v)
TrendMicro Mal_Zvrek3
McAfee-GW-Edition BehavesLike.Win32.Ransomware.dt
Sophos Mal/Generic-R + Mal/Zbot-U
SentinelOne Static AI – Malicious PE
GData Backdoor.Generic.467391
Jiangmin Trojan/Generic.bcoq
Avira TR/Crypt.ZPACK.Gen2
MAX malware (ai score=99)
Antiy-AVL Trojan/Generic.ASMalwS.1841A94
Microsoft PWS:Win32/Zbot.gen!Y
AhnLab-V3 Trojan/Win32.Zbot.R37324
Acronis suspicious
BitDefenderTheta AI:Packer.01BD9A321F
ALYac Backdoor.Generic.467391
VBA32 Trojan.Zeus.EA.0999
TrendMicro-HouseCall Mal_Zvrek3
Rising Trojan.Toga!8.136D (CLOUD)
Yandex Trojan.Kryptik!7IgEeuaxfiw
Ikarus Trojan-Spy.Win32.Zbot
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Zbot.U!tr
AVG Win32:Cybota [Trj]
Cybereason malicious.2a5db2
Panda Trj/CI.A

How to remove Backdoor.Generic.467391?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “Malware.AI.1748864991” infection

The Malware.AI.1748864991 is considered dangerous by lots of security experts. When this infection is active,…

3 mins ago

HackTool.MetaSploit removal tips

The HackTool.MetaSploit is considered dangerous by lots of security experts. When this infection is active,…

3 mins ago

What is “Malware.AI.4145117540”?

The Malware.AI.4145117540 is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

Trojan.Dropper.VPA malicious file

The Trojan.Dropper.VPA is considered dangerous by lots of security experts. When this infection is active,…

20 mins ago

Malware.AI.1545899637 malicious file

The Malware.AI.1545899637 is considered dangerous by lots of security experts. When this infection is active,…

27 mins ago

Trojan:Win32/Strab.GPG!MTB removal guide

The Trojan:Win32/Strab.GPG!MTB is considered dangerous by lots of security experts. When this infection is active,…

45 mins ago