Should I remove “Backdoor.Win32.Plite.bhum”?

The Backdoor.Win32.Plite.bhum is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.Win32.Plite.bhum virus can do?

Unconventionial language used in binary resources: Korean
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Backdoor.Win32.Plite.bhum?


File Info:
name: E35C96446961803A15C2.mlw
path: /opt/CAPEv2/storage/binaries/8a71624775a5675d6152ad3ac3c8d5d09948650a54b15bca176903d8d724cc32
crc32: 923994A5
md5: e35c96446961803a15c2126334f49fb0
sha1: 79fc76a5ca38233f1aeb1179fb2d20762e325629
sha256: 8a71624775a5675d6152ad3ac3c8d5d09948650a54b15bca176903d8d724cc32
sha512: aea4b761c8317095c3bab8a0425e89061348ace62352f95f1ae2abd2b56ac1c19e24c3065959452578e25bdaa356ea00ac7aef6468e087ed6ec86e1bb0d75c02
ssdeep: 6144:xDKHpICd4Gp9r6zedtFUWLTEsniHLrFPjHeYjBO/LF2xZPdZJFjx:pKJz2edtFUWEsniHtzrhLL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13164AF223690C037E376177148C5E6B46AA5BC3159A5970FFBA47B399E301938B2B34F
sha3_384: c32315ffb2385d82e31a30905da180e1ca8b3b569e1dc5e9f9eef92065ea6b3c81e4ee134bcff727d4e5b6f6b299ff4e
ep_bytes: e80da10000e979feffff8bff558bec51
timestamp: 2013-10-09 07:43:47

Version Info:
0: [No Data]

Backdoor.Win32.Plite.bhum also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Trojan.AVKill.33487
MicroWorld-eScan	Gen:Variant.Zusy.426059
ALYac	Gen:Variant.Zusy.426059
Malwarebytes	Crypt.Trojan.Malicious.DDS
Zillya	Trojan.Urelas.Win32.42918
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 004bb7de1 )
K7AntiVirus	Trojan ( 004bb7de1 )
BitDefenderTheta	Gen:NN.ZexaF.36250.umW@a4zu4BiO
Cyren	W32/Urelas.AP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Urelas.W
APEX	Malicious
ClamAV	Win.Packed.Urelas-9879149-0
Kaspersky	Backdoor.Win32.Plite.bhum
BitDefender	Gen:Variant.Zusy.426059
NANO-Antivirus	Trojan.Win32.Plite.ewdrfz
Avast	Win32:Dropper-NGT [Drp]
Tencent	Trojan.Win32.Agent.aep
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Crypt.XPACK.Gen2
Baidu	Win32.Trojan.Urelas.a
VIPRE	Gen:Variant.Zusy.426059
TrendMicro	Trojan.Win32.Urelas.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.e35c96446961803a
Emsisoft	Gen:Variant.Zusy.426059 (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.1CYCYN2
Jiangmin	Backdoor.Generic.zpu
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/Crypt.XPACK.Gen2
MAX	malware (ai score=81)
Antiy-AVL	Trojan[Backdoor]/Win32.Plite
Xcitium	TrojWare.Win32.Gupboot.BB@53dg1h
Arcabit	Trojan.Zusy.D6804B
ZoneAlarm	Backdoor.Win32.Plite.bhum
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R493701
McAfee	BackDoor-FBLQ!E35C96446961
TACHYON	Dropper/W32.Plite.333824
Cylance	unsafe
TrendMicro-HouseCall	Trojan.Win32.Urelas.SM
Rising	Trojan.Gupboot!1.9CEA (CLASSIC)
Ikarus	Trojan.Win32.Urelas
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Urelas.O!tr
AVG	Win32:Dropper-NGT [Drp]
Cybereason	malicious.5ca382
DeepInstinct	MALICIOUS

How to remove Backdoor.Win32.Plite.bhum?

Backdoor.Win32.Plite.bhum removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X