Backdoor.Win32.Agent.myuciw information

The Backdoor.Win32.Agent.myuciw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Agent.myuciw virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Presents an Authenticode digital signature
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates running processes
• A process created a hidden window
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Anomalous binary characteristics
• Uses suspicious command line tools or Windows utilities

How to determine Backdoor.Win32.Agent.myuciw?

File Info:
name: 072BE014D1FAA67C4EDC.mlw
path: /opt/CAPEv2/storage/binaries/e833dd3329c5dacdb7433a2ec4e5d18b9916e6702c5aded4126ae69a07f2b173
crc32: E9DFB3AF
md5: 072be014d1faa67c4edc940e0429340d
sha1: f3bbf861e620c74ee4b9da1b33319c5ee3ea5d89
sha256: e833dd3329c5dacdb7433a2ec4e5d18b9916e6702c5aded4126ae69a07f2b173
sha512: f574d362788303e812b6111d3277071ffbd69dfe2916608adbf201d591a2d48c3125d60893a7fca02bbf4ee59d2f1206fb7217675d6d0a94d5f5578071014aee
ssdeep: 49152:2lDWTDYCe1PzliYVrDtbAi3/hBkgrCIJLf:2lDke1PzliYJDtbA0/hCGLf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17E9533B20E946C2FFA102DB1C225675A9A64AF07675236478307F5AE6110F4C37CEEF9
sha3_384: 6f0e08bf6f7aee84e38aa68e447ec06242ee11d13585c775ddc6c7a0c389c5217e9e08f92c689217711b0c6bbc2ea115
ep_bytes: b830fb89005064ff3500000000648925
timestamp: 2021-07-06 05:20:24

Version Info:
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
Unity Version: 2017.4.5f1_89d1db9cb682
Translation: 0x0804 0x04b0
FileDescription: Skype
ProductName: Skype
CompanyName: Skype
LegalCopyright: Skype
Comments: Skype

Backdoor.Win32.Agent.myuciw also known as:

How to remove Backdoor.Win32.Agent.myuciw?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.