About "Backdoor.Win32.Androm.twja" infection

The Backdoor.Win32.Androm.twja is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Androm.twja virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Androm.twja?


File Info:
crc32: AA825B7C
md5: cd092c67983176baf23851ba743c58d4
name: karakte.exe
sha1: e1af98680a675855aa1a69432c1ec1cb0dfe8b3e
sha256: 50d8549aa3cbcc3c2e12d87ab1e2bca6a309945ebeb6a4e047ffc838765c44bf
sha512: 0332fa889eda906e0a6a4b14babc6c6ae248d0d239103e6b53f62edac45a5d72b44c0933ab5f443312299e73810618f4e6b84637c9d8b2ca12b01f043fa022ee
ssdeep: 768:LPxdWzf53Z/FzumLL8f/ASC35TzVPjtO/7do:zydJLL1SA9jt1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: karakte
FileVersion: 1.00
CompanyName: Ubisoft
ProductName: masretnoncom
ProductVersion: 1.00
FileDescription: Inbreat8
OriginalFilename: karakte.exe

Backdoor.Win32.Androm.twja also known as:

Sangfor	Malware
Cybereason	malicious.80a675
BitDefenderTheta	Gen:NN.ZevbaCO.34100.dm0@ayTP1Upi
Cyren	W32/Kryptik.BGD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
GData	Win32.Trojan-Downloader.Dagurleo.6N556A
Kaspersky	Backdoor.Win32.Androm.twja
Tencent	Win32.Backdoor.Androm.Syht
DrWeb	Trojan.PackedENT.133
McAfee-GW-Edition	BehavesLike.Win32.Trojan.qm
SentinelOne	DFI – Suspicious PE
Trapmine	malicious.high.ml.score
APEX	Malicious
F-Prot	W32/Kryptik.BGD.gen!Eldorado
Endgame	malicious (moderate confidence)
ZoneAlarm	Backdoor.Win32.Androm.twja
Microsoft	Trojan:Win32/Wacatac.C!ml
McAfee	Artemis!CD092C679831
Malwarebytes	Trojan.GuLoader.VB
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Injector.ELAX
Rising	Trojan.Injector!8.C4 (CLOUD)
Ikarus	Trojan.Win32.Injector
eGambit	Unsafe.AI_Score_66%
Fortinet	W32/ELAX!tr
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Generic/HEUR/QVM03.0.D8AB.Malware.Gen

How to remove Backdoor.Win32.Androm.twja?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Backdoor.Win32.Androm.twja” infection