Backdoor

Backdoor.Win32.Agent.myudwl malicious file

Malware Removal

The Backdoor.Win32.Agent.myudwl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Agent.myudwl virus can do?

  • Presents an Authenticode digital signature
  • Possible date expiration check, exits too soon after checking local time
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Backdoor.Win32.Agent.myudwl?


File Info:

crc32: A74E4BB1
md5: 7bd640e9732285de88ed744d89506483
name: 7BD640E9732285DE88ED744D89506483.mlw
sha1: f91428564950635bdc884416d287d8f13a41be85
sha256: 83e03a8f49da9f5a5b234c9a4851615223343a1d60f279626b57e2cf81c133f0
sha512: 1f915c01c33e0e01a59a0747b17ae00332de5ddd6d5eabbcde4822f0a51ae1c405919007e34cae30ecb6e51ca319fd21eed2e39aac72581470ceb8f860d872fd
ssdeep: 24576:hwZGRdacIF1nUfY7ogBL/flJhkEH9/VHBVzrQ:hNnac21nUwB3lJhvpM
type: PE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive

Version Info:

LegalCopyright: xa9 Cbvpnimaa Yzkeosrejv. Ert Pcvcoc Zfryjxir.
InternalName: Stkiqwv
FileVersion: 48.54.7474.12574 (niscfhg_qfg.025672-9516)
CompanyName: Cbvpnimaa Yzkeosrejv
PrivateBuild: Xtrna 0, 1990
ProductName: Eeyqkmxj Aytgctlk
ProductVersion: 48.54.7474.12574
FileDescription: Qkc77 Pmpmffz Oivgrysiez
OriginalFilename: AXDYMLH.EXE .SGO
Translation: 0x0409 0x04b0

Backdoor.Win32.Agent.myudwl also known as:

LionicTrojan.Win32.Agent.m!c
Elasticmalicious (high confidence)
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (W)
AvastFileRepMetagen [Malware]
KasperskyBackdoor.Win32.Agent.myudwl
McAfee-GW-EditionArtemis!Trojan
SentinelOneStatic AI – Suspicious PE
WebrootW32.Trojan.Gen
eGambitPE.Heur.InvalidSig
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!7BD640E97322
MalwarebytesTrojan.Dropper.WXT.Generic
AVGFileRepMetagen [Malware]

How to remove Backdoor.Win32.Agent.myudwl?

Backdoor.Win32.Agent.myudwl removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment