Backdoor

Backdoor.Win32.Agent.myufdw removal tips

Malware Removal

The Backdoor.Win32.Agent.myufdw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Agent.myufdw virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Backdoor.Win32.Agent.myufdw?


File Info:

crc32: C423C25C
md5: f24139cb770b66204fab8b000178018c
name: F24139CB770B66204FAB8B000178018C.mlw
sha1: 62146d9cd4b061481f4d520210ded98aa6643056
sha256: e78f648892f7073557b3db513d38ede08d11a84973fb2f81e5c411ea1177ec5d
sha512: 6e35e35a2f5ac57b9afd5e0a4c2a09b41153d1763d01eda0760b6e96fa3ed43c49c3b6236a41e2a6ecdec3951bdbb98b363b79852ccff9d13fc3c950e880f840
ssdeep: 24576:I8uXwO02IdFvKNfsfI5lk4BnTQ//2JT/EbGsm:I8gHIHiNfsI/LS/KrE
type: PE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive

Version Info:

LegalCopyright: Copyright by Chris Long 2020. All rights reserved.
InternalName: EZSignIt
FileVersion: 3.05
Comments: EZSignIt Code Signer by Chris Long 2008-2020.
ProductName: EZSignIt Code Signer
ProductVersion: 3.05
FileDescription: EZSignIt Code Signer by Chris Long 2008-2020.
OriginalFilename: EZSignIt.exe
Translation: 0x0409 0x04b0

Backdoor.Win32.Agent.myufdw also known as:

K7AntiVirusTrojan ( 005888681 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.38054455
CylanceUnsafe
K7GWTrojan ( 005888681 )
Cybereasonmalicious.cd4b06
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.CAB.AQ suspicious
APEXMalicious
AvastSNH:Script [Dropper]
KasperskyBackdoor.Win32.Agent.myufdw
BitDefenderTrojan.GenericKD.38054455
MicroWorld-eScanTrojan.GenericKD.38054455
Ad-AwareTrojan.GenericKD.38054455
SophosML/PE-A
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.f24139cb770b6620
EmsisoftTrojan.GenericKD.38054455 (B)
AviraBDS/Agent.sgcny
eGambitUnsafe.AI_Score_78%
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.38054455
AhnLab-V3Trojan/Win.Generic.R418855
McAfeeArtemis!F24139CB770B
MAXmalware (ai score=83)
MalwarebytesTrojan.Dropper.AutoIt
PandaTrj/CI.A
IkarusMalware.Win32.AVEvader
FortinetRiskware/Application
AVGSNH:Script [Dropper]

How to remove Backdoor.Win32.Agent.myufdw?

Backdoor.Win32.Agent.myufdw removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment