Backdoor

Backdoor.Win32.Mokes.ahwt removal guide

Malware Removal

The Backdoor.Win32.Mokes.ahwt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Mokes.ahwt virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine Backdoor.Win32.Mokes.ahwt?


File Info:

crc32: 2E10393C
md5: 5fb9cb00f19eafbf578af693767a8754
name: 5FB9CB00F19EAFBF578AF693767A8754.mlw
sha1: 69574ed2e1a5bffcdb012b1eb50fc71614c80747
sha256: 7f00898e4d91dfa3f78ad6428a2f03b1563b7b49e27c7a30b5a709ee024ca157
sha512: 2e34bd5885bae0021e6d86689275618407843e0482f38786c8085404fb411ecc50cd67bfc583e18ac9ddbe12e1591f0d6aadd512890d07317848f485ab61809a
ssdeep: 12288:Pa3+06vmtI3YATeXUDyL2T67coONVdCN:PaWetkjyU2wgcoO/dC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: All rights reserved.
InternalName: Dbpropsetproviderdatasourceinfo
CompanyName: InCode Solutions
PrivateBuild: 4.6.7.753
LegalTrademarks: All rights reserved.
ProductName: Dbpropsetproviderdatasourceinfo
ProductVersion: 4.6.7.753
FileDescription: Traded Myaddon Shallis
OriginalFilename: Dbpropsetproviderdatasourceinfo
Translation: 0x0409 0x04b0

Backdoor.Win32.Mokes.ahwt also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005605291 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacBackdoor.Mokes.gen
CylanceUnsafe
ZillyaBackdoor.Mokes.Win32.2162
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaBackdoor:Win32/Mokes.9e0480d3
K7GWTrojan ( 005605291 )
Cybereasonmalicious.0f19ea
CyrenW32/Trojan.SYDA-6219
ESET-NOD32Win32/Smokeloader.J
APEXMalicious
AvastWin32:Trojan-gen
KasperskyBackdoor.Win32.Mokes.ahwt
BitDefenderTrojan.GenericKD.42265524
NANO-AntivirusTrojan.Win32.Mokes.hizblj
ViRobotTrojan.Win32.Z.Mokes.437760
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
MicroWorld-eScanTrojan.GenericKD.42265524
TencentWin32.Backdoor.Mokes.Tapl
Ad-AwareTrojan.GenericKD.42265524
SophosML/PE-A
BitDefenderThetaGen:NN.ZexaF.34628.Aq0@aKq4GEni
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R031C0DH120
FireEyeGeneric.mg.5fb9cb00f19eafbf
EmsisoftTrojan.GenericKD.42265524 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Mokes.ceq
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1117301
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Masson.A!rfn
AegisLabTrojan.Win32.Mokes.trbP
GDataTrojan.GenericKD.42265524
AhnLab-V3Trojan/Win32.Mokes.R327436
McAfeeArtemis!5FB9CB00F19E
MAXmalware (ai score=100)
VBA32Backdoor.Mokes
MalwarebytesTrojan.SmokeLoader
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R031C0DH120
RisingBackdoor.Mokes!8.619 (CLOUD)
YandexBackdoor.Mokes!q/zoyeGyY+w
IkarusTrojan-Ransom.GandCrab
MaxSecureTrojan.Malware.74792488.susgen
FortinetW32/Mokes.AHWT!tr.bdr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Backdoor.Mokes.HwoCx48A

How to remove Backdoor.Win32.Mokes.ahwt?

Backdoor.Win32.Mokes.ahwt removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment