Backdoor

About “Backdoor.Win32.Androm.tzkx” infection

Malware Removal

The Backdoor.Win32.Androm.tzkx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Androm.tzkx virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Backdoor.Win32.Androm.tzkx?


File Info:

crc32: FA13A7EE
md5: a25f1ec650f22bdce0affc96a4efd944
name: forbuden.exe
sha1: 3ee5f18837f356da8e6ba93a327b869a1a4f01e9
sha256: a5e4bb53403a9f15c9e069a7bb2065cc3a92f1ed2a6cb9b4a9b30f69e99fed3d
sha512: 3d418c9a06a40b1831157e91d2dfdced18cedc24f4abe69a97e59a3692ccd28d0f06911193469f0e3681ad42f873d4c2e365740578552d45076f3d9eac0999b0
ssdeep: 768:uAKStyrvjxaVtQUyczDEOuWyrTRLeqj6oTcOP+RMk6H9Hp:qSwvjFUyc8YeTRLAjgb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: forbuden
FileVersion: 1.00
OriginalFilename: forbuden.exe
ProductName: ADVER

Backdoor.Win32.Androm.tzkx also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanTrojan.GenericKD.33735436
McAfeeFareit-FSN!A25F1EC650F2
ALYacTrojan.GenericKD.33735436
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 0056587a1 )
BitDefenderTrojan.GenericKD.33735436
K7GWTrojan ( 0056587a1 )
TrendMicroTROJ_GEN.R049C0PDT20
BitDefenderThetaGen:NN.ZevbaCO.34108.fm0@aOAo0Hii
F-ProtW32/VBKrypt.AJI.gen!Eldorado
SymantecInfostealer
ESET-NOD32a variant of Win32/Injector.ELPV
APEXMalicious
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.33735436
KasperskyBackdoor.Win32.Androm.tzkx
AlibabaBackdoor:Win32/Androm.67908b6e
TencentWin32.Backdoor.Androm.Lkdr
EmsisoftTrojan.GenericKD.33735436 (B)
ComodoMalware@#qnxaoum7u4w3
F-SecureHeuristic.HEUR/AGEN.1130117
DrWebTrojan.DownLoader33.37348
Invinceaheuristic
Trapminemalicious.high.ml.score
SophosMal/FareitVB-AC
IkarusTrojan.VB.Crypt
CyrenW32/VBKrypt.AJI.gen!Eldorado
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1130117
MAXmalware (ai score=84)
Antiy-AVLTrojan/Win32.Injector
ArcabitTrojan.Generic.D202C30C
AhnLab-V3Trojan/Win32.Injector.R334392
ZoneAlarmBackdoor.Win32.Androm.tzkx
MicrosoftTrojan:Win32/Ditertag.A
Acronissuspicious
Ad-AwareTrojan.GenericKD.33735436
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R049C0PDT20
RisingTrojan.Injector!8.C4 (CLOUD)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GuLoader.VHIM!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Backdoor.Win32.Androm.tzkx?

Backdoor.Win32.Androm.tzkx removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment