Categories: Backdoor

Backdoor.Generic.640986 removal tips

The Backdoor.Generic.640986 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Generic.640986 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Unconventionial language used in binary resources: Spanish (Modern)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Backdoor.Generic.640986?


File Info:

name: 5B0900907D87FA2EA43F.mlwpath: /opt/CAPEv2/storage/binaries/c0966134b5ac5c073665850314ddc90576195e63ef2636de94f6fc90f8bac4d6crc32: C9AF3BFFmd5: 5b0900907d87fa2ea43f98c712347f0bsha1: 0a5a9d01db7ec6bb45bfe8a56242302206148acesha256: c0966134b5ac5c073665850314ddc90576195e63ef2636de94f6fc90f8bac4d6sha512: d37ca8bba8ee79eec4370cb1ab131d5c39b97e3eb69b9cd9924f3e7553fe77d096f81b67120a8a2bf9cfc57e610fb98198982041897056ec2c3623b25867b5e9ssdeep: 6144:iQz2YWP3GPivRk7zF4tFEeyVJmit2nc9ckCyhX56ucV3rsNVtu9ow6wnriFvhq2J:iqW1pk7/M+FvhqdLWVptH4B3ktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10A742903FB60B11DE55384B16874536AAA2A7E351645EC0BB7809F5930B2AE3BDF470Fsha3_384: cb6039f3533411b157ab032805956857cfa17b6523411167859e1bb6480617ac3af94ea86d1a47cdc0d72135a2669609ep_bytes: 68f0494000e8f0ffffff000040000000timestamp: 2004-08-02 08:49:04

Version Info:

Translation: 0x0c0a 0x04b0CompanyName: EicusProductName: CGSrvFileVersion: 1.00ProductVersion: 1.00InternalName: CiberSrvOriginalFilename: CiberSrv.exe

Backdoor.Generic.640986 also known as:

Bkav W32.AIDetect.malware2
Lionic Trojan.Win32.Generic.4!c
DrWeb BACKDOOR.Trojan
MicroWorld-eScan Backdoor.Generic.640986
FireEye Generic.mg.5b0900907d87fa2e
McAfee Generic.drx
Cylance Unsafe
VIPRE Backdoor.Generic.640986
Sangfor [MICROSOFT VISUAL BASIC V6.0]
K7AntiVirus Trojan ( 0052fb4f1 )
Alibaba Trojan:Win32/Generic.99e660aa
K7GW Trojan ( 0052fb4f1 )
Cybereason malicious.07d87f
BitDefenderTheta Gen:NN.ZevbaCO.34606.vm0@a0u9W@P
Cyren W32/VB-Backdoor-PEK-based!Maxim
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Generik.GRDSJEE
Zoner Probably Heur.ExeHeaderP
APEX Malicious
Paloalto generic.ml
BitDefender Backdoor.Generic.640986
NANO-Antivirus Trojan.Win32.Mlw.fakhdc
Avast Win32:Malware-gen
Tencent Win32.Backdoor.Generic.Suxt
Ad-Aware Backdoor.Generic.640986
Emsisoft Backdoor.Generic.640986 (B)
Comodo Malware@#1tluqwlp1utbl
TrendMicro TROJ_GEN.R067C0PHH22
McAfee-GW-Edition Generic.drx
Trapmine malicious.high.ml.score
Sophos Mal/Generic-S
SentinelOne Static AI – Malicious PE
GData Backdoor.Generic.640986
Google Detected
Avira TR/Spy.Gen
MAX malware (ai score=99)
Arcabit Backdoor.Generic.D9C7DA
Microsoft Trojan:Win32/Occamy.CC0
Cynet Malicious (score: 99)
ALYac Backdoor.Generic.640986
Malwarebytes Malware.Heuristic.1008
Rising Trojan.Tiggre!8.ED98 (CLOUD)
Yandex Trojan.Agent!+5TL0TwlBow
Ikarus Trojan.SuspectCRC
Fortinet W32/Generik.GRDSJEE!tr
AVG Win32:Malware-gen
Panda Trj/GdSda.A
CrowdStrike win/malicious_confidence_100% (W)

How to remove Backdoor.Generic.640986?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Lazy.280688 removal guide

The Lazy.280688 is considered dangerous by lots of security experts. When this infection is active,…

41 mins ago

Malware.AI.3454153382 information

The Malware.AI.3454153382 is considered dangerous by lots of security experts. When this infection is active,…

56 mins ago

Midie.100502 removal tips

The Midie.100502 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Malware.AI.3915743673 (file analysis)

The Malware.AI.3915743673 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Malware.AI.2034266737 removal

The Malware.AI.2034266737 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Trojan.Win32.Agent.xbmkmt removal tips

The Trojan.Win32.Agent.xbmkmt is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago