Backdoor

Backdoor.GenericFC.S20328115 removal guide

Malware Removal

The Backdoor.GenericFC.S20328115 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.GenericFC.S20328115 virus can do?

  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Backdoor.GenericFC.S20328115?


File Info:

name: B301426C204CDE9D7DE8.mlw
path: /opt/CAPEv2/storage/binaries/3636a2f13cbc26f1ddfe49573ef0aad239dabc204fdde8b185c65081d16e0838
crc32: 460ED41F
md5: b301426c204cde9d7de840ad831bee7f
sha1: e700838d33e9548e22c86d7dc4c8976267cdb75c
sha256: 3636a2f13cbc26f1ddfe49573ef0aad239dabc204fdde8b185c65081d16e0838
sha512: 186198be77cd922d9af63d4088ea4cb20842b42c8c462a7b649d7ca51859365b07f4306a37f49600d77c15ba0bd005a4bf1fda0929d5dc58eb30bba9a36f3d36
ssdeep: 768:PptLHSU0PQNjbd/fanAiqELMLVuKOtb60BnpOkpxnfE:L7F04Nj8Zb6as0E
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17FC2E948B7ECE621D2BF86BA19B142244371B14BBD11DA0D4FDCD88A2B777D58881F93
sha3_384: 4250efb8f277e39fd850f16955c921141945696d29d6a02ab720937770c8fc93d19d6caacbbd22c1c580b9e9803d90be
ep_bytes: ff250020400000010203040608080000
timestamp: 2018-02-06 19:53:40

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: NoFile.exe
LegalCopyright:
OriginalFilename: NoFile.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Backdoor.GenericFC.S20328115 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.CoinStealer.i!c
AVGWin32:BankerX-gen [Trj]
DrWebTrojan.PWS.Stealer.23701
MicroWorld-eScanGen:Variant.Cerbu.107378
FireEyeGeneric.mg.b301426c204cde9d
CAT-QuickHealBackdoor.GenericFC.S20328115
SkyhighBehavesLike.Win32.Generic.mm
McAfeeGenericRXEB-UD!B301426C204C
MalwarebytesCoinStealer.Spyware.Stealer.DDS
VIPREGen:Variant.Cerbu.107378
SangforTrojan.Win32.Save.a
K7AntiVirusPassword-Stealer ( 00524b481 )
AlibabaTrojanSpy:MSIL/CoinSteal.8d806c0a
K7GWPassword-Stealer ( 00524b481 )
BitDefenderThetaGen:NN.ZemsilF.36804.bm0@amWIekj
VirITTrojan.Win32.Stealer.BJBP
SymantecTrojan.Coinstealer
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/PSW.CoinStealer.BO
Paloaltogeneric.ml
ClamAVWin.Trojan.Razy-6794929-0
KasperskyHEUR:Trojan-PSW.MSIL.Stealer.gen
BitDefenderGen:Variant.Cerbu.107378
NANO-AntivirusTrojan.Win32.CoinStealer.exythg
SUPERAntiSpywareHack.Tool/Gen-BitCoinMiner
AvastWin32:BankerX-gen [Trj]
RisingStealer.Agent!1.C6CB (CLASSIC)
EmsisoftGen:Variant.Cerbu.107378 (B)
F-SecureHeuristic.HEUR/AGEN.1305479
ZillyaTrojan.CoinStealer.Win32.573
TrendMicroTROJ_GEN.R002C0OAO24
Trapminemalicious.high.ml.score
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Generic.axav
VaristW32/CoinMiner.AJ.gen!Eldorado
AviraHEUR/AGEN.1305479
MAXmalware (ai score=100)
Antiy-AVLTrojan[Backdoor]/Win32.AGeneric
Kingsoftmalware.kb.c.999
MicrosoftTrojan:Win32/Dynamer!rfn
XcitiumTrojWare.MSIL.CoinStealer.BO@7q3a0f
ArcabitTrojan.Cerbu.D1A372
ZoneAlarmHEUR:Trojan-PSW.MSIL.Stealer.gen
GDataGen:Variant.Cerbu.107378
GoogleDetected
AhnLab-V3Trojan/Win32.Dynamer.C2403088
VBA32Trojan.MSIL.gen.11
ALYacGen:Variant.Cerbu.107378
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0OAO24
TencentWin32.Backdoor.Generic.Edhl
YandexTrojan.PWS.CoinStealer!eXw7EEJNvk8
IkarusTrojan.MSIL.PSW
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/CoinStealer.BO!tr
DeepInstinctMALICIOUS
alibabacloudTrojan[stealer]:MSIL/CoinStealer.BO

How to remove Backdoor.GenericFC.S20328115?

Backdoor.GenericFC.S20328115 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment