Categories: Backdoor

What is “Backdoor.Generic.484019”?

The Backdoor.Generic.484019 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Generic.484019 virus can do?

Behavioural detection: Executable code extraction – unpacking
Reads data out of its own binary image
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor.Generic.484019?


File Info:
name: D664295E0760CFC99332.mlwpath: /opt/CAPEv2/storage/binaries/94ccbafb8cebaffb3a3e79c31e0b16dcef16f9caae6dad02b093ee84fc16f49bcrc32: 85A5C77Cmd5: d664295e0760cfc993320b34a1c9a0e7sha1: 14a57de65343990a557963c4ed69fd1243c729f5sha256: 94ccbafb8cebaffb3a3e79c31e0b16dcef16f9caae6dad02b093ee84fc16f49bsha512: 52a4ad444978ff902da3ae4391bb37c3715aeb67e2bb7fa4fb16fdde7f62af3344211d00ccbde8bdbb05a012579c5a476d0ba74a008572fd49efdb09b2cc1504ssdeep: 12288:1PVV/jr///zyXGyBcw/aNPRWPXA1mrahYJfuy:tjD3zyXJBceOJW0mrhftype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C8C48D07B7D61A55D2AD23312AE7C7D266B3BC085F1B864E6224737E2C71E209D36B07sha3_384: 99222cb41a087414ffc2533397488a6c06f32005a5251c29e7e8169c45ccbf9851922facbab11f7a03812f4f16d5a6b8ep_bytes: 68601c4000e8eeffffff000048000000timestamp: 2010-10-02 01:07:07
Version Info:
0: [No Data]

Backdoor.Generic.484019 also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Shakblades.lyuQ
tehtris	Generic.Malware
Cynet	Malicious (score: 100)
FireEye	Generic.mg.d664295e0760cfc9
CAT-QuickHeal	Worm.Ainslot.AA3
McAfee	GenericRXAA-AA!D664295E0760
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Virus.Win32.Save.a
K7AntiVirus	P2PWorm ( 0017e2081 )
Alibaba	Worm:Win32/Cosmu.6ce97f4b
K7GW	P2PWorm ( 0017e2081 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZevbaF.36318.JmW@a0ftkKfG
VirIT	Trojan.Win32.VB_Heur
Cyren	W32/Hupigon.D.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/VB.NXB
APEX	Malicious
ClamAV	Win.Trojan.Cosmu-7105755-1
Kaspersky	Trojan.Win32.Cosmu.aett
BitDefender	Backdoor.Generic.484019
NANO-Antivirus	Trojan.Win32.Cosmu.dyaxlr
MicroWorld-eScan	Backdoor.Generic.484019
Avast	Win32:Cambot-AN [Wrm]
Tencent	Malware.Win32.Gencirc.115a1c19
TACHYON	Trojan/W32.VB-Cosmu.573440
Emsisoft	Backdoor.Generic.484019 (B)
Baidu	Win32.Worm.Agent.y
F-Secure	Backdoor.BDS/Backdoor.Gen
DrWeb	BackDoor.BotSiggen.48
VIPRE	Backdoor.Generic.484019
TrendMicro	WORM_SWISYN.SM
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.hh
Trapmine	malicious.high.ml.score
Sophos	Mal/VB-GI
Ikarus	Trojan-PWS.Win32.VB
GData	Backdoor.Generic.484019
Jiangmin	Trojan/Cosmu.gjh
Webroot	W32.Worm.Gen
Avira	BDS/Backdoor.Gen
Antiy-AVL	Trojan/Win32.Cosmu
Xcitium	Worm.Win32.VB.~nrc@4jiiup
Arcabit	Backdoor.Generic.D762B3
ViRobot	Trojan.Win.Z.Cosmu.573440.AH
ZoneAlarm	Trojan.Win32.Cosmu.aett
Microsoft	Trojan:Win32/Vindor!pz
Google	Detected
AhnLab-V3	Trojan/Win32.Cosmu.R21539
VBA32	Trojan.VBRA.013894
ALYac	Backdoor.Generic.484019
MAX	malware (ai score=88)
Cylance	unsafe
Panda	Trj/Banker.MJW
TrendMicro-HouseCall	WORM_SWISYN.SM
Rising	Backdoor.VB!1.651D (CLASSIC)
Yandex	Trojan.GenAsa!azlqnN4I9f0
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Cospet.HA!tr
AVG	Win32:Cambot-AN [Wrm]
Cybereason	malicious.e0760c
DeepInstinct	MALICIOUS