Backdoor

Backdoor.Generic.50069 (file analysis)

Malware Removal

The Backdoor.Generic.50069 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Generic.50069 virus can do?

  • A process attempted to delay the analysis task.
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

hud.11ave.net
aaxe.11ave.net
aaxd.11ave.net
aaxc.11ave.net
aaxb.11ave.net
aaxa.11ave.net
aaxg.11ave.net
ptj.otrd.cn
aaxf.11ave.net

How to determine Backdoor.Generic.50069?


File Info:

crc32: 3336FE2B
md5: 0d28b6b6bb9178deb5e3a0af7503228d
name: 0D28B6B6BB9178DEB5E3A0AF7503228D.mlw
sha1: 6436e7ef79da0a01cc7b7dd9bb413e3d0a5561ff
sha256: 54c67565a03ea4527ae5328be8b471e40632280808402a73de36a5f3e1bfa942
sha512: 32c55e7d270c2c71c3432f1adcaacda27938fbf0475f4740b0837119a83c43bfbffcc1af8fb38c4136e8868cbf01128f903a6e40f181cdf171dbb6f6c72534c2
ssdeep: 3072:BLofl+a6VD5XOJ93pVnFuxE15B5xuz+TBfiPs5o0go1:rUJ93pVnsmB5++TBaPs5o41
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 2007
InternalName: IEMonitor
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: IEMonitor x5e94x7528x7a0bx5e8f
ProductVersion: 1, 0, 0, 1
FileDescription: IEMonitor Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: IEMonitor.EXE
Translation: 0x0804 0x04b0

Backdoor.Generic.50069 also known as:

K7AntiVirusTrojan ( 000fa1c11 )
DrWebTrojan.Smoking.13
CynetMalicious (score: 99)
CMCGeneric.Win32.0d28b6b6bb!CMCRadar
ALYacBackdoor.Generic.50069
CylanceUnsafe
ZillyaBackdoor.Agent.Win32.41090
AlibabaBackdoor:Win32/TScope.c77c6254
K7GWTrojan ( 000fa1c11 )
Cybereasonmalicious.6bb917
BaiduWin32.Trojan.Agent.fr
CyrenW32/Backdoor.DTYJ-2864
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.QBM
APEXMalicious
AvastWin32:Agent-ACQC [Trj]
ClamAVWin.Ransomware.Cryptor-9867582-0
KasperskyBackdoor.Win32.Agent.ieh
BitDefenderBackdoor.Generic.50069
NANO-AntivirusTrojan.Win32.Agent.qynm
MicroWorld-eScanBackdoor.Generic.50069
TencentWin32.Backdoor.Agent.Fsa
Ad-AwareBackdoor.Generic.50069
SophosMal/Generic-S
ComodoBackdoor@#2a84k5anecs3c
BitDefenderThetaGen:NN.ZexaF.34236.iq0@ailhyclb
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericR-OLK!0D28B6B6BB91
FireEyeGeneric.mg.0d28b6b6bb9178de
EmsisoftBackdoor.Generic.50069 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor/Agent.bbou
WebrootW32.Trojan.Trojan-Backdoor.Gen.
AviraTR/Downloader.Gen
Antiy-AVLTrojan/Generic.ASMalwS.1122F7
KingsoftWin32.Hack.Agent.(kcloud)
MicrosoftPWS:Win32/Zbot!ml
ZoneAlarmBackdoor.Win32.Agent.ieh
GDataBackdoor.Generic.50069
AhnLab-V3Trojan/Win32.Agent.R59037
McAfeeGenericR-OLK!0D28B6B6BB91
MAXmalware (ai score=100)
VBA32Backdoor.Agent
PandaTrj/CI.A
YandexBackdoor.Agent.GEJV
IkarusTrojan-Dropper.Agent
MaxSecureTrojan.Malware.1993666.susgen
FortinetW32/Agent.IEH!tr.bdr
AVGWin32:Agent-ACQC [Trj]
Paloaltogeneric.ml

How to remove Backdoor.Generic.50069?

Backdoor.Generic.50069 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment