Backdoor

Backdoor.Win32.Agent.mytymc malicious file

Malware Removal

The Backdoor.Win32.Agent.mytymc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Agent.mytymc virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Detects Sandboxie through the presence of a library
  • Detects Avast Antivirus through the presence of a library
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Attempts to modify proxy settings

How to determine Backdoor.Win32.Agent.mytymc?


File Info:

crc32: 79057B03
md5: 4640329c632cb0386bb1bab8e9c16365
name: 4640329C632CB0386BB1BAB8E9C16365.mlw
sha1: dc625c60cc977f217e1a54f04dbd2db8b14fbfad
sha256: 43232b9a7a32d3f89372942235d08e6ef93aae303d55b01d7b1f5ec4774fa149
sha512: bf6e9bbb027ce6d92621a3ed7df67aa3e15dcddab39bdf60c9dea91b90f3c36aac0a642a234e0ecbae3927a0a2054f6f3704d3a9d251b1d6c01fdbdc340a22a3
ssdeep: 24576:AyIHjLox0UGPHpn302pqa5ugHd+XfyIY9nO+kBDdo8eoSg1vpADs+r:Ayyu0UIHp302pcgHd+X6IYaJdWwvpEr
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName: HappyNewYear
Comments: This installation was built with Inno Setup.
ProductName: HappyNewYear
ProductVersion: 23.47
FileDescription: HappyNewYear Setup
Translation: 0x0000 0x04b0

Backdoor.Win32.Agent.mytymc also known as:

DrWebTrojan.DownLoader36.34725
MicroWorld-eScanTrojan.GenericKD.36139021
FireEyeTrojan.GenericKD.36139021
ALYacTrojan.GenericKD.36139021
AegisLabTrojan.Multi.Generic.4!c
BitDefenderTrojan.GenericKD.36139021
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderThetaGen:NN.ZexaF.34760.omGfa0j8LHjG
CyrenW32/FileTour.BB.gen!Eldorado
SymantecSMG.Heur!gen
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Generic-9808271-0
KasperskyBackdoor.Win32.Agent.mytymc
AlibabaBackdoor:Win32/Zurgop.9b082b12
AvastWin32:Trojan-gen
Ad-AwareTrojan.GenericKD.36139021
SophosMal/Generic-S
ComodoMalware@#3vg6os3z6v8jg
F-SecureTrojan.TR/Dropper.Gen
TrendMicroTROJ_GEN.R002C0WAI21
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
EmsisoftTrojan.GenericKD.36139021 (B)
AviraTR/Dropper.Gen
MicrosoftTrojan:Win32/Tiggre!rfn
GridinsoftAdware.Win32.Downloader.oa
ArcabitTrojan.Generic.D227700D
ZoneAlarmBackdoor.Win32.Agent.mytymc
GDataTrojan.GenericKD.36139021
CynetMalicious (score: 85)
AhnLab-V3PUP/Win32.RL_InstallCore.R362085
McAfeeArtemis!4640329C632C
VBA32Trojan.Downloader
ZonerTrojan.Win32.99098
ESET-NOD32Win32/TrojanDownloader.Zurgop.DA
TrendMicro-HouseCallTROJ_GEN.R002C0WAI21
RisingDownloader.Agent/SFX!1.D0EC (CLASSIC)
FortinetW32/Agent.MYTXYG!tr.bdr
AVGWin32:Trojan-gen
PandaTrj/CI.A
Qihoo-360Generic/HEUR/QVM42.3.A21B.Malware.Gen

How to remove Backdoor.Win32.Agent.mytymc?

Backdoor.Win32.Agent.mytymc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment