Backdoor.Win32.Hupigon.diz removal guide

The Backdoor.Win32.Hupigon.diz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.Win32.Hupigon.diz virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Backdoor.Win32.Hupigon.diz?


File Info:
name: 0DB5AFF3922981C95FD3.mlw
path: /opt/CAPEv2/storage/binaries/dc48a9bafa2f92385b759ec966d149e6ddf5fe14a67eb55373193db920fc7089
crc32: D3CC4D25
md5: 0db5aff3922981c95fd3e9e2fb1bf54f
sha1: cab0cb7e0e83a131628ff2535802ae74dac245e0
sha256: dc48a9bafa2f92385b759ec966d149e6ddf5fe14a67eb55373193db920fc7089
sha512: 791385952b12c237bac06b9d631be50ef7c528cb23f2b755a951a32ae16f658a118751fce40426461b4778dbd9deafd38287266641a858dbd2723c9fd43c9aca
ssdeep: 12288:0BF3Z4mxxKbNxNnqA9+LWYxKBt4JCYUee5QjfflwC3xPmFSrkyAnZSxFFf:qQmXBE+LWrcoYaynlDSSruAf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T175F42326DA57D439D06A83FC5067B3278A61EA534F3B4FF313FB115B76DC890A82811A
sha3_384: ae8f0db331f01505c7eee16fcf7fac33aba58e23a8867c8716e9504c59ee453b6fd830af93b6ccfbc9a5123f3d56b6bb
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Backdoor.Win32.Hupigon.diz also known as:

Lionic	Trojan.Win32.Hupigon.m!c
MicroWorld-eScan	Gen:Heur.Zilix.1
FireEye	Generic.mg.0db5aff3922981c9
McAfee	Artemis!0DB5AFF39229
VIPRE	Gen:Heur.Zilix.1
Sangfor	Suspicious.Win32.Save.ins
BitDefender	Gen:Heur.Zilix.1
VirIT	Backdoor.Win32.Hupigon6.FEC
Symantec	Trojan.KillAV
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/Packed.ASProtect.AAB
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Hupigon.diz
Alibaba	Backdoor:Win32/Hupigon.1b953545
Tencent	Win32.Backdoor.Hupigon.Hmnw
Ad-Aware	Gen:Heur.Zilix.1
Emsisoft	Gen:Heur.Zilix.1 (B)
Comodo	Malware@#275nit5mnbvgz
Zillya	Backdoor.Hupigon.Win32.122434
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Mal/Behav-270
Ikarus	VirTool.WinNT.Xiaoho
GData	Gen:Heur.Zilix.1
Jiangmin	Backdoor/Hupigon.bpzm
Webroot	W32.Malware.Gen
Arcabit	Trojan.Zilix.1
ViRobot	Backdoor.Win32.A.Hupigon.1183744.F
ZoneAlarm	Backdoor.Win32.Hupigon.diz
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
ALYac	Gen:Heur.Zilix.1
MAX	malware (ai score=100)
Malwarebytes	Malware.Heuristic.1003
Rising	Backdoor.Hupigon!8.B57 (CLOUD)
Yandex	Backdoor.Hupigon!lDhupTP94Kg
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.41584.susgen
Fortinet	W32/Hupigon.DIZ!tr.bdr
Panda	Trj/CI.A

How to remove Backdoor.Win32.Hupigon.diz?

Backdoor.Win32.Hupigon.diz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X