Backdoor.Generic.580665 information

The Backdoor.Generic.580665 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Generic.580665 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates running processes
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Backdoor.Generic.580665?

File Info:
name: 937955B4DF36B735BE29.mlw
path: /opt/CAPEv2/storage/binaries/28df4883f4a4ba4a8638dc35c73318599a9057a6ec014d94b4bff22a6ccdc977
crc32: 5E4D43C9
md5: 937955b4df36b735be29d2efe0950bdf
sha1: 8831e363d3a92d51e9e65cca190ece2bc33f14b3
sha256: 28df4883f4a4ba4a8638dc35c73318599a9057a6ec014d94b4bff22a6ccdc977
sha512: 501b0a0a7c70f7de3a81b389e4be389e8f2d6d55b970b07f9b12ce0cfbb70fd0cee6ea7107dd0f09f54ae85498f8f7cc0280e763767570066d51f94e6a1b48a8
ssdeep: 49152:h8xE8TeMrKUKitCjsMnvCJ7hK8ZRsAX9CmyI8Ur/KpRFAwah5GcE0bnjI:hhSrKUZtCjXoI/myIVipRFAwuk0I
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T139B5330713F6D2A9FE5B0C796E5D8A25E20DFD5E638494980E97806D79270E08E8BDCC
sha3_384: d0d9384afe46544bd053eb838bae40fb84f2d89bc8034f07ab56b7df893290860ca72af76f732fcc8b443ff853e4a696
ep_bytes: 60be00004d008dbe0010f3ff57eb0b90
timestamp: 2008-02-12 10:49:02

Version Info:
CompanyName: Eper1 Software
FileDescription: Eper1 Internet Browser
FileVersion: 1190
InternalName: Eper1
LegalCopyright: Copyright © Eper1 Software 1995-2011
OriginalFilename: Eper1.exe
ProductName: Eper1 Internet Browser
ProductVersion: 11.01
Translation: 0x0409 0x04b0

Backdoor.Generic.580665 also known as:

How to remove Backdoor.Generic.580665?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.