Backdoor.Win32.Androm.pnhk removal

The Backdoor.Win32.Androm.pnhk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Androm.pnhk virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• A process attempted to delay the analysis task.
• Reads data out of its own binary image
• Drops a binary and executes it
• Sniffs keystrokes
• Executed a process and injected code into it, probably while unpacking
• Creates a hidden or system file
• Creates a copy of itself
• Interacts with known DarkComet registry keys

How to determine Backdoor.Win32.Androm.pnhk?

File Info:
crc32: 47AF65D3
md5: 953e83fbe55f8da52aae18de01d0408c
name: 953E83FBE55F8DA52AAE18DE01D0408C.mlw
sha1: 0cdb5d0d08c0ae8425209a8be3c6d3ccdbc2793f
sha256: 446d9c64b5fbc636ba55a23444de337cd014ee7914b9baeca7812f3af7484cbc
sha512: 8fd11e9b8c2f38379b83ebcfe910a5f1782f639e99f9d845d44cc86983f6b297bd50ed3eefb1995057a1b3785a59b579fd20f4db79856b6a33d7f8ac69948965
ssdeep: 12288:kuWSBMFfj0+gggjpXVGzA7rj7muerQJIcZT4Rj92JGEI3:znMFfj0+oMzAvuB/ceRhwGEI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 suEOJmCUo 2011
Assembly Version: 12.8.8.6
InternalName: Maxi.exe
FileVersion: 3.12.7.3
CompanyName: GcoEkCosSGE
ProductName: LdaxTrxtGJX
ProductVersion: 1.0.0.0
FileDescription: NJwRIyNXGFsf
OriginalFilename: Maxi.exe

Backdoor.Win32.Androm.pnhk also known as:

How to remove Backdoor.Win32.Androm.pnhk?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.