How to remove “Backdoor.Win32.Buterat”?

The Backdoor.Win32.Buterat is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Buterat virus can do?

• Unconventionial language used in binary resources: Korean
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor.Win32.Buterat?

File Info:
name: 7A2FE869DB0CDD2BDAA7.mlw
path: /opt/CAPEv2/storage/binaries/b262797c5086fe7e71c8fad927d89df1c3a5294e74238ac24c02259c586e6e4b
crc32: 211E9578
md5: 7a2fe869db0cdd2bdaa7c2f889dab960
sha1: f4d9d6313cc6746365934d61232a17668bb6c598
sha256: b262797c5086fe7e71c8fad927d89df1c3a5294e74238ac24c02259c586e6e4b
sha512: 1d31a438e13ccc4fc13d238e5eb953e10faeaf8743bc991f7544bca44f37a38f804849b6988a510546b1a51c8f11776d33c267ba9bd116d3d082c77364050e29
ssdeep: 12288:Yru7QKKIQ1WWFjFZ4Pl71dTQdf4tIkcJR:YK7QAWFWZVQ1gRc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B4E46B97F7A08172F91755315E9B0A72D3AAFD518EA1878313D4FB2C2CB2E518127F22
sha3_384: abc626f8533f89e991a32394cf2eac67fd8f8dae3234b614b9203f41ee4054c23b5919bb05543c19c79eadcdf3188603
ep_bytes: 558bec6aff6868354400684009420064
timestamp: 2010-12-09 02:47:35

Version Info:
Comments: 
CompanyName: Tooli의 고전게임
FileDescription: 
FileVersion: 
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: 
ProductVersion: 
SpecialBuild: 
Translation: 0x0409 0x04b0

Backdoor.Win32.Buterat also known as:

How to remove Backdoor.Win32.Buterat?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.