Backdoor.Win32.Mokes.aloz malicious file

The Backdoor.Win32.Mokes.aloz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Mokes.aloz virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Creates RWX memory
• A process created a hidden window
• Unconventionial language used in binary resources: Norwegian (Nynorsk)
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Executed a process and injected code into it, probably while unpacking
• Detects Sandboxie through the presence of a library
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Backdoor.Win32.Mokes.aloz?

File Info:
crc32: 72017330
md5: 8a9f67c8303c798df9794abbc60b558b
name: 8A9F67C8303C798DF9794ABBC60B558B.mlw
sha1: d5e1e4baf443e976df671042d05cbd17eb74f492
sha256: b1c525b12a46c0db21ea82a0689b7a6103a4f46fbc159441beee0d7dac8e62db
sha512: e66a85483cab76d59a4396ba4e3b663f0390a941f762b5a2df7e1a54e079f89e5a51a96b541ff64ae91940221f1e2e5c2b12749e8e150424ab2fdd53e46b3992
ssdeep: 6144:btbB/Q9rbkZ2W6E58EF5tcKOuXEgidOX:bnU8Z2yLteuXEiX
type: PE32 executable (GUI) Intel 80386 system file, for MS Windows, UPX compressed

Version Info:
InternalName: triwilbifog.acs
FileVersion: 6.26.361
Copyright: Copyrighz (C) 2020, vodkafug
ProductVersion: 1.0.2
TranslationUsa: 0x0273 0x04d3

Backdoor.Win32.Mokes.aloz also known as:

How to remove Backdoor.Win32.Mokes.aloz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.