About "Backdoor.Generic.617609" infection

The Backdoor.Generic.617609 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Generic.617609 virus can do?

Executable code extraction
Unconventionial language used in binary resources: Spanish (Modern)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Generic.617609?


File Info:
crc32: CFA78C4A
md5: 2178b0abe64b461afab93542224cd219
name: 2178B0ABE64B461AFAB93542224CD219.mlw
sha1: afd44c7168d8ce6839c7800c562cd1f647c8d1c2
sha256: 0220a07c1ba32ff8babe23c6061da02ebb54983340a848faa981f7fb819f30c2
sha512: 06fd48972b32f0481f65967a4408a3074771f6d79033f545698c1954efc00772fb8ec280bda377114be05a43ed09e8dbae720ce990a65b1835e2beb1ff5f0487
ssdeep: 6144:8s55JEzUc8DjduSwxCvGDUE+B2v0+dZIN:35ap8NAuGDUETZ
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
Translation: 0x0c0a 0x04b0
LegalCopyright: ForoSpyware - InfoSpyware
InternalName: MSNCleaner
FileVersion: 1.06.0009
CompanyName: InfoSpyware - ForoSpyware
ProductName: MSNCleaner
ProductVersion: 1.06.0009
FileDescription: Anti-Malware
OriginalFilename: MSNCleaner.exe

Backdoor.Generic.617609 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Generic.4!c
ClamAV	Win.Trojan.Agent-390921
ALYac	Backdoor.Generic.617609
Zillya	Trojan.Genome.Win32.115570
Alibaba	Backdoor:Win32/WrongInf.485ee061
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.be64b4
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:WrongInf-G [Susp]
BitDefender	Backdoor.Generic.617609
MicroWorld-eScan	Backdoor.Generic.617609
Ad-Aware	Backdoor.Generic.617609
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.BadFile.cc
FireEye	Generic.mg.2178b0abe64b461a
Emsisoft	Backdoor.Generic.617609 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_96%
Antiy-AVL	Trojan/Generic.ASMalwS.887923
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Backdoor.Generic.D96C89
GData	Backdoor.Generic.617609
McAfee	Artemis!2178B0ABE64B
MAX	malware (ai score=100)
VBA32	Trojan.Genome.sa
Yandex	Trojan.Dynamer!vP+c93t46gI
Fortinet	W32/PossibleThreat
AVG	Win32:WrongInf-G [Susp]
Paloalto	generic.ml

How to remove Backdoor.Generic.617609?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Backdoor.Generic.617609” infection