Backdoor

Backdoor.Win32.Tiny removal instruction

Malware Removal

The Backdoor.Win32.Tiny is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Tiny virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Backdoor.Win32.Tiny?


File Info:

crc32: EA4F3808
md5: 6de975c52ddb3b3b04338dd58d436a6b
name: 6DE975C52DDB3B3B04338DD58D436A6B.mlw
sha1: c0b5ff2d3a3f7660f25832f45ffae47d20232a58
sha256: 1eccc05638010b9a71e0d85731ebd41e64a471b127b261d28b15d08f54a1740b
sha512: 0b624d03c0fd5bc6d3988281103d370055a28e8c552af1217363a5505db50ed7f53b38afb38e0cf698c9086777b6aa55dd85b69ba36688faaa15678cb45775cf
ssdeep: 1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIBkSYkmAztVG:ymb3NkkiQ3mdBjFIBBYkz7G
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Backdoor.Win32.Tiny also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
ClamAVWin.Malware.Blackmoon-9752571-1
FireEyeGeneric.mg.6de975c52ddb3b3b
CAT-QuickHealTrojan.Wacatac.A2.mue
Qihoo-360HEUR/QVM19.1.5BDB.Malware.Gen
ALYacGen:Variant.Zusy.317649
CylanceUnsafe
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderGen:Variant.Zusy.317649
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_100% (D)
TrendMicroTROJ_GEN.R06EC0DKI20
CyrenW32/BlackMoon.P.gen!Eldorado
SymantecTrojan Horse
APEXMalicious
AvastWin32:Injector-CVE [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Backdoor.Win32.Tiny.gen
MicroWorld-eScanGen:Variant.Zusy.317649
TencentMalware.Win32.Gencirc.10b0f742
Ad-AwareGen:Variant.Zusy.317649
SophosMal/Generic-S
ComodoBackdoor.Win32.Agent.BVX@8hj67l
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Inject1.58305
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.kc
EmsisoftGen:Variant.Zusy.317649 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen
MicrosoftWorm:Win32/Ganelp
ArcabitTrojan.Zusy.D4D8D1
ZoneAlarmHEUR:Backdoor.Win32.Tiny.gen
GDataGen:Variant.Zusy.317649
AhnLab-V3Malware/RL.Generic.R256000
Acronissuspicious
McAfeeGenericRXLV-NU!6DE975C52DDB
MAXmalware (ai score=86)
VBA32Trojan.Occamy
MalwarebytesTrojan.Vundo
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Packed.BlackMoon.A potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R06EC0DKI20
RisingTrojan.Agent!1.B82B (CLASSIC)
YandexTrojan.GenAsa!+V7EyyfQ22g
IkarusWorm.Win32.Ganelp
eGambitUnsafe.AI_Score_87%
FortinetW32/GenKryptik.CZVL!tr
BitDefenderThetaGen:NN.ZexaF.34634.eiY@ai09iRm
AVGFileRepMalware
Cybereasonmalicious.52ddb3
MaxSecureTrojan.Malware.300983.susgen

How to remove Backdoor.Win32.Tiny?

Backdoor.Win32.Tiny removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment