Backdoor.Generic.663631 removal

The Backdoor.Generic.663631 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Generic.663631 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Injection with CreateRemoteThread in a remote process
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Unconventionial language used in binary resources: Gaelic
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Code injection with CreateRemoteThread in a remote process
Creates a hidden or system file
Creates a copy of itself
Anomalous binary characteristics

Related domains:

liveupdates2000.com

updatewindows.net

winsecureserv.com

secureservis.in

livesecureupdate.com

How to determine Backdoor.Generic.663631?


File Info:
crc32: 68ABF8F4
md5: f311097bdd28b28882ee5963e94b87e5
name: F311097BDD28B28882EE5963E94B87E5.mlw
sha1: 25aa40373f5d686ee01d47b5d3e4d2fb5af8fb0c
sha256: b166f3576bd95971720af2a90b139480060fa1293fd890f15ff1606a787ef9da
sha512: 0de4b68d08c6b2d8355f7f713cb9d0469ef2f1cceeecf7f94c1fcf5c61f51ea19687d36aa93be7549699087e7e58168f68cf6f7e6a8bb7eab771962484bafb16
ssdeep: 3072:PaB1s/gCZlJlOmsa/AFwPeFWlu/O81CeGITBS9z:iB1UJx/AFtn/fTA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright(C) 2001-2010 SourceTec Software Co., LTD
InternalName: SWFDecompiler
FileVersion: 6, 0, 0, 0
CompanyName: SourceTec Software Co., LTD
PrivateBuild: 610
LegalTrademarks: Sothink
ProductName: Sothink SWF Decompiler
SpecialBuild: 100916
ProductVersion: 6, 0, 0, 0
FileDescription: SWF Decompiler
OriginalFilename: SWFDecompiler.exe
Translation: 0x0409 0x04b0

Backdoor.Generic.663631 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0055e3991 )
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.22584
Cynet	Malicious (score: 100)
ALYac	Backdoor.Generic.663631
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.34475
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Blocker.5ea1ea2e
K7GW	Trojan ( 0055e3991 )
Cybereason	malicious.bdd28b
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Injector.DWB
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.iizh
BitDefender	Backdoor.Generic.663631
NANO-Antivirus	Trojan.Win32.VBKrypt.ecjghn
MicroWorld-eScan	Backdoor.Generic.663631
Tencent	Malware.Win32.Gencirc.114c0b71
Ad-Aware	Backdoor.Generic.663631
Sophos	ML/PE-A + Mal/VBCheMan-C
BitDefenderTheta	Gen:NN.ZevbaF.34770.lm0@aKKcUynO
VIPRE	LooksLike.Win32.Malware!vb (v)
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.f311097bdd28b288
Emsisoft	Backdoor.Generic.663631 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Blocker.qis
Avira	TR/Dropper.Gen
eGambit	Generic.Backdoor
Microsoft	VirTool:Win32/VBInject.gen!FA
Arcabit	Backdoor.Generic.DA204F
AegisLab	Trojan.Win32.Refroso.laEM
GData	Backdoor.Generic.663631
Acronis	suspicious
McAfee	GenericR-HMR!F311097BDD28
MAX	malware (ai score=100)
VBA32	SScope.Trojan.VBRA.5058
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VBKrypt.C!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Backdoor.Generic.663631?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.Generic.663631 removal