Backdoor.Win32.Agent.myudaz (file analysis)

The Backdoor.Win32.Agent.myudaz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Agent.myudaz virus can do?

Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
A process created a hidden window
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Agent.myudaz?


File Info:
crc32: 3818612F
md5: 1aa9dda1b9b413444b0668500611c7f3
name: 1AA9DDA1B9B413444B0668500611C7F3.mlw
sha1: d980ac83bf107df1a7510ad94304a7e364d927a5
sha256: 02031c62d916cdd41d26a271e93ec5b06eabfa910187207b02ead07fd480c2a9
sha512: 37a301fd61c42c10f774950826469f215a20a24d783316febfeafd0fa06d88f536daa4d5d10153fd1ec42cc778d87716fe5b4bb9782c03e86a4e3b336e9efd53
ssdeep: 196608:52Gvm6FNJgKzN5nCIxDniOShT7KJUMpAng3+jB:5RFFNX1iRRKLpAguV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2005-2010 Oleg N. Scherbakov
InternalName: 7ZSfxMod
FileVersion: 1.4.1.2100
CompanyName: Oleg N. Scherbakov
PrivateBuild: April 28, 2011
ProductName: 7-Zip SFX
ProductVersion: 1.4.1.2100
FileDescription: 7z Setup SFX (x86)
OriginalFilename: 7ZSfxMod_x86.exe
Translation: 0x0000 0x04b0

Backdoor.Win32.Agent.myudaz also known as:

Cynet	Malicious (score: 100)
Zillya	Backdoor.Agent.Win32.80898
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Backdoor.Win32.Agent.myudaz
Tencent	Malware.Win32.Gencirc.10ce9e14
McAfee-GW-Edition	BehavesLike.Win32.Dropper.wc
Jiangmin	Trojan.Alien.kc
Antiy-AVL	Trojan/Generic.ASMalwS.3462B76
Gridinsoft	Trojan.Win32.Agent.oa!s1
AhnLab-V3	Trojan/Win.Generic.R436119
McAfee	Artemis!1AA9DDA1B9B4
Yandex	Backdoor.Agent!9C0eoGVbrX8
Ikarus	Trojan-Spy.RedLineStealer
AVG	Win32:Malware-gen

How to remove Backdoor.Win32.Agent.myudaz?

Backdoor.Win32.Agent.myudaz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.Win32.Agent.myudaz (file analysis)