Backdoor

Backdoor.Win32.Blakken.vnn information

Malware Removal

The Backdoor.Win32.Blakken.vnn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Blakken.vnn virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Backdoor.Win32.Blakken.vnn?


File Info:

crc32: 099C9D41
md5: 1703cf594a36dbdcaa8a06726080c6dd
name: upload_file
sha1: 62633a2e71973594444e37016666c2b976111ec5
sha256: 4c062db10b19973d6a2228e56b40cd1139cb4ff38e2d49894bef25ca65e21475
sha512: 1843fc9d5bd4e983df537ffee79e285d455893f24d059442fa42862a0a9a67a3d37bea2a1eb8f3c76876e9ed6fd4bec1eab61d150017fafcb2dbe950fac872cd
ssdeep: 3072:ontVyqWr9N22azOu+OsM5T4yYqmrhc1uMJt8rZ3USnsH8C66E:BZu/+OFipqmrhIbve3dnU8f
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Backdoor.Win32.Blakken.vnn also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.679962
FireEyeGeneric.mg.1703cf594a36dbdc
ALYacGen:Variant.Razy.679962
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 00536d121 )
BitDefenderGen:Variant.Razy.679962
K7GWTrojan ( 00536d121 )
Cybereasonmalicious.94a36d
SymantecTrojan.Formbook
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Formbook-7399661-0
KasperskyBackdoor.Win32.Blakken.vnn
AlibabaBackdoor:Win32/Formbook.8eebc7e6
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingStealer.Formbook!1.C470 (CLASSIC)
Ad-AwareGen:Variant.Razy.679962
ComodoMalware@#3tcldl9js44ka
MaxSecureTrojan.Malware.300983.susgen
DrWebTrojan.Siggen9.48175
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.VirRansom.cc
SophosMal/Generic-S
SentinelOneDFI – Malicious PE
JiangminTrojan.Generic.gcxta
WebrootW32.Trojan.Gen
AviraTR/Crypt.ZPACK.Gen
MAXmalware (ai score=82)
MicrosoftTrojan:Win32/Formbook!MTB
ArcabitTrojan.Razy.DA601A
ZoneAlarmBackdoor.Win32.Blakken.vnn
GDataGen:Variant.Razy.679962
AhnLab-V3Trojan/Win32.Formbook.C4173787
Acronissuspicious
McAfeeGenericRXCD-ZZ!1703CF594A36
VBA32BScope.TrojanPSW.Banker
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Formbook.AA
TencentWin32.Backdoor.Blakken.Dvpr
IkarusTrojan-Spy.FormBook
eGambitUnsafe.AI_Score_82%
FortinetW32/GenKryptik.AYEB!tr
BitDefenderThetaAI:Packer.A03D01901E
AVGWin32:Formbook-B [Trj]
AvastWin32:Formbook-B [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Backdoor.2bc

How to remove Backdoor.Win32.Blakken.vnn?

Backdoor.Win32.Blakken.vnn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment