Categories: Backdoor

Backdoor.Generic.756204 removal tips

The Backdoor.Generic.756204 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Generic.756204 virus can do?

Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Sniffs keystrokes
Checks for the presence of known windows from debuggers and forensic tools
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Backdoor.Generic.756204?


File Info:
crc32: B3543657md5: 65dce2eb90e6627cbff44142b6c4fd47name: dhhsd4xgq.exesha1: b9b3476db997de6923b405e2fa740cb32eb51504sha256: bb8a3fbf488ba180608e7514c9ec1be1c2b997de4d46275dc5ab9cec0d040688sha512: 556f869c93ee0c5300af86bcc717864ec93bcf4375d876bb7a92418d811921a2a7987c01b2b6f953474d1689c6b689e41f5a50a75c686a92a9f04db3e7692722ssdeep: 24576:R6K7IrtLmCC+bMCz2SvLfV612Xi4fO8m1+UNNJ:R6hV4zCz2SvLfV612Xi4fDm3NTtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: InternalName: Cheat Engine TrainerFileVersion: 1.8.0.0CompanyName: CheatEngineHomepage: http://www.cheatengine.org/LegalTrademarks: Comments: ProductName: ProductVersion: 1.2FileDescription: OriginalFilename: Translation: 0x0413 0x04e4

Backdoor.Generic.756204 also known as:

MicroWorld-eScan	Backdoor.Generic.756204
FireEye	Generic.mg.65dce2eb90e6627c
McAfee	Artemis!65DCE2EB90E6
Cylance	Unsafe
VIPRE	Trojan.Win32.Delf.abt (fs)
Sangfor	Malware
K7AntiVirus	Unwanted-Program ( 004d38111 )
BitDefender	Backdoor.Generic.756204
K7GW	Unwanted-Program ( 004d38111 )
Cybereason	malicious.b90e66
F-Prot	W32/Backdoor2.HJVG
TotalDefense	Win32/CheatEngine.A!genus
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Agent-240912
GData	Win32.Riskware.Hacktool.E
Alibaba	HackTool:Win32/CheatEngine.e358f090
Rising	Trojan.Bitrep!8.F596 (CLOUD)
Endgame	malicious (high confidence)
Emsisoft	Application.Generic (A)
Comodo	Malware@#3q1ftftfkh3i9
F-Secure	Trojan.TR/Agent.cada.14909
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fareit.ch
Trapmine	malicious.high.ml.score
Sophos	CheatEngine (PUA)
Cyren	W32/Backdoor.AGXZ-3621
Jiangmin	TrojanDropper.Agent.arim
Webroot	W32.Trojan.Gen
Avira	TR/Agent.cada.14909
MAX	malware (ai score=99)
Microsoft	Trojan:Win32/Wacatac.C!ml
Arcabit	Backdoor.Generic.DB89EC
SUPERAntiSpyware	Hack.Tool/Gen-GameCheat
Acronis	suspicious
VBA32	TrojanDropper.Agent
ALYac	Backdoor.Generic.756204
Ad-Aware	Backdoor.Generic.756204
ESET-NOD32	a variant of Win32/HackTool.CheatEngine.AB potentially unsafe
Yandex	HackTool.CheatEngine!9Drovhclxmg
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	Riskware/CheatEngine
BitDefenderTheta	Gen:NN.ZelphiF.34098.0G3@aOHDuUbO
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)