Should I remove “Backdoor.Win32.Chyopic.q”?

The Backdoor.Win32.Chyopic.q is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.Win32.Chyopic.q virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Backdoor.Win32.Chyopic.q?


File Info:
name: DAC47325AC569683AE55.mlw
path: /opt/CAPEv2/storage/binaries/c0f831442721e88a095ce4c39a104800a45b079b8028548186cd4d73260d9cd3
crc32: 4B9FE826
md5: dac47325ac569683ae55c1256e52a353
sha1: bb8d2bb3fcb93d942334dc431adf83b6969be91d
sha256: c0f831442721e88a095ce4c39a104800a45b079b8028548186cd4d73260d9cd3
sha512: 365fac666c367fa52dd4395e086868b94a569d872c0710eb6d8e045f38e7c93d603fd29e7a701602071a1fdf85b7aa383d7e80d373b9f32e99c5307191dec75a
ssdeep: 48:SHs/XGTpIvSOuqOgCRPacK/7nw+xkK5DdomCcCycHAEz1kv:+s/+q+qOgCRPzGb5xVR+1kv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BA0242A7ACD73C91EE4D17B900F3D7A0207F61981487B8EC7F540DAA581B2132AB648F
sha3_384: 4d0917fa02eeffe9adb981575bee7b8b12804aa59906db826ac79ddde05336848999f6e4f6638c9cff7ded785a433f01
ep_bytes: 00000000000000000000000000000000
timestamp: 2009-06-18 00:27:37

Version Info:
0: [No Data]

Backdoor.Win32.Chyopic.q also known as:

Bkav	W32.AIDetect.malware1
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Kaspersky	Backdoor.Win32.Chyopic.q
Avast	FileRepMalware [Misc]
DrWeb	BackDoor.Kimo.4
FireEye	Generic.mg.dac47325ac569683
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Crypt.XPACK.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Chino[Tiny]
Cynet	Malicious (score: 100)
McAfee	GenericRXAA-FA!DAC47325AC56
Rising	Trojan.Generic@AI.98 (RDMK:cmRtazr++Ws0Ko1+WaVqh+nUtDGc)
Ikarus	Trojan.Agent2
MaxSecure	Virus.Mabezat.Dam
AVG	FileRepMalware [Misc]
Cybereason	malicious.3fcb93

How to remove Backdoor.Win32.Chyopic.q?

Backdoor.Win32.Chyopic.q removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X