Backdoor

Backdoor.Win32.Mokes.ajtv removal instruction

Malware Removal

The Backdoor.Win32.Mokes.ajtv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Mokes.ajtv virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Network activity detected but not expressed in API logs

How to determine Backdoor.Win32.Mokes.ajtv?


File Info:

crc32: 1149B0F6
md5: d55d0c53ca9272958bedc4412d645d20
name: upload_file
sha1: 224460df6bb8088219c2472c2eaed7946f37fbdb
sha256: abf8f67f4af137d16be52a94b3c6cb8145eef92f7ef46c6f6602a084289d2ba4
sha512: 0f6ae391b0a048d724c769fdc4cd8d9814a383611c6a7660112b113fb28917bbfa5fde6d8192b4e47c18ea5a5abdd52a2b7ed37f37bfcf8b1ba134661f958fd9
ssdeep: 24576:AyIOjLox0UGn+Dn302pqa5ugHd+Xfy2Amc9Uo8eoSg1vpADs/:Ayzu0UUi302pcgHd+X6X/UWwvpd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName: Dpeams
Comments: This installation was built with Inno Setup.
ProductName: Vx415x410x41c
ProductVersion: 7.45
FileDescription: Vx415x410x41c Setup
Translation: 0x0000 0x04b0

Backdoor.Win32.Mokes.ajtv also known as:

Elasticmalicious (high confidence)
ClamAVWin.Malware.Dealply-9255844-1
FireEyeTrojan.GenericKD.43669185
McAfeeArtemis!D55D0C53CA92
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.43669185
K7GWRiskware ( 0040eff71 )
TrendMicroTROJ_GEN.R03BC0DHM20
SymantecSMG.Heur!gen
APEXMalicious
Paloaltogeneric.ml
KasperskyBackdoor.Win32.Mokes.ajtv
AlibabaBackdoor:Win32/Mokes.a05eac42
ViRobotTrojan.Win32.Z.Wacatac.1057601
MicroWorld-eScanTrojan.GenericKD.43669185
EmsisoftTrojan.GenericKD.43669185 (B)
F-SecureTrojan.TR/AD.Behavior.tvnwv
ZillyaDownloader.Dofoil.Win32.5463
SophosMal/Generic-S
IkarusTrojan.Dofoil
JiangminTrojan.Propagate.bze
MaxSecureTrojan.Malware.105305691.susgen
AviraTR/AD.Behavior.tvnwv
MAXmalware (ai score=83)
MicrosoftTrojan:Win32/Skeeyah.A!rfn
ArcabitTrojan.Generic.D29A56C1
ZoneAlarmBackdoor.Win32.Mokes.ajtv
GDataTrojan.GenericKD.43669185
AhnLab-V3Trojan/Win32.Dofoil.R346166
BitDefenderThetaGen:NN.ZexaF.34186.mqW@a0nB9ZgG
MalwarebytesTrojan.Dropper
ESET-NOD32Win32/TrojanDownloader.Zurgop.DA
TrendMicro-HouseCallTROJ_GEN.R03BC0DHM20
TencentWin32.Backdoor.Mokes.Wqcz
FortinetW32/Ursu.926483!tr
WebrootW32.Adware.Gen
AVGWin32:Trojan-gen
PandaTrj/CI.A
Qihoo-360Win32/Backdoor.89a

How to remove Backdoor.Win32.Mokes.ajtv?

Backdoor.Win32.Mokes.ajtv removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment