Categories: Backdoor

Backdoor.WSHRat.Drop removal instruction

The Backdoor.WSHRat.Drop is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.WSHRat.Drop virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Backdoor.WSHRat.Drop?


File Info:

crc32: A5113F38md5: 3d8cdce3e57157152517a7648018abfcname: class.sfx.exesha1: adaecd1f90cfd765f1b1386e7d0d60ebee0dbce4sha256: 74ec8e060c324c0ecf50865e073e51db99ec78f97ca971f2852fb10cdd2b5443sha512: d28430386d8e34b83dc3cf5aa1f9dee3964ef6b3d7a4cab2e7df3b9d20c05bf921fc8185d3fcd2809053094d6b18581af4f084ec7b1a1273de9a23e8994dcbbassdeep: 12288:2GqN/XdctpVtkZtX+t4d039AAg5lQGn26tqFn3DiyYN/4Z01YrZ1ei:eNcBtkZXd0tJMn+tziyYN/oOE0itype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Backdoor.WSHRat.Drop also known as:

Bkav W32.AIDetectVM.malware2
MicroWorld-eScan Trojan.GenericKD.33573696
FireEye Generic.mg.3d8cdce3e5715715
McAfee Artemis!3D8CDCE3E571
Cylance Unsafe
Sangfor Malware
BitDefender Trojan.GenericKD.33573696
K7GW Trojan ( 0055852d1 )
TrendMicro TROJ_GEN.R002C0PCT20
BitDefenderTheta Gen:NN.ZemsilF.34104.Fm0@a0oOcNf
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of MSIL/Kryptik.SXL
APEX Malicious
Avast Win32:RATX-gen [Trj]
GData Trojan.GenericKD.33573696
Kaspersky HEUR:Trojan-Spy.MSIL.Quasar.gen
Alibaba Trojan:Win32/MalMail.ali2000008
AegisLab Trojan.Win32.Wanna.tr1Y
Rising Spyware.Quasar!8.1BB5 (CLOUD)
Endgame malicious (high confidence)
Emsisoft Trojan.GenericKD.33573696 (B)
Comodo Malware@#jx647c3gq3sa
F-Secure Trojan.TR/Dropper.MSIL.Gen2
DrWeb Trojan.Siggen9.27885
Zillya Trojan.Generic.Win32.995180
Invincea heuristic
McAfee-GW-Edition BehavesLike.Win32.Backdoor.jc
Trapmine malicious.high.ml.score
Sophos Mal/Generic-S
Ikarus Trojan.MSIL.Crypt
Avira TR/Dropper.MSIL.Gen2
MAX malware (ai score=80)
Microsoft Trojan:Win32/Occamy.C
Arcabit Trojan.Generic.D2004B40
ZoneAlarm HEUR:Trojan-Spy.MSIL.Quasar.gen
ALYac Trojan.GenericKD.33573696
Ad-Aware Trojan.GenericKD.33573696
Malwarebytes Backdoor.WSHRat.Drop
TrendMicro-HouseCall TROJ_GEN.R002C0PCT20
Tencent Msil.Trojan-spy.Quasar.Lmvc
SentinelOne DFI – Malicious
Fortinet MSIL/Kryptik.SXL!tr
AVG Win32:RATX-gen [Trj]
CrowdStrike win/malicious_confidence_90% (W)
Qihoo-360 HEUR/QVM10.1.3723.Malware.Gen

How to remove Backdoor.WSHRat.Drop?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “TrojanDownloader:Win32/Seimon.D” infection

The TrojanDownloader:Win32/Seimon.D is considered dangerous by lots of security experts. When this infection is active,…

9 mins ago

VHO:Trojan.Win32.Copak.cpulx removal tips

The VHO:Trojan.Win32.Copak.cpulx is considered dangerous by lots of security experts. When this infection is active,…

10 mins ago

Virus:Win32/Jadtre.B information

The Virus:Win32/Jadtre.B is considered dangerous by lots of security experts. When this infection is active,…

14 mins ago

Generic.Dialer.067D8B6E (file analysis)

The Generic.Dialer.067D8B6E is considered dangerous by lots of security experts. When this infection is active,…

19 mins ago

How to remove “Trojan:Win32/Vbclone.RPX!MTB”?

The Trojan:Win32/Vbclone.RPX!MTB is considered dangerous by lots of security experts. When this infection is active,…

24 mins ago

Malware.AI.2511406519 removal tips

The Malware.AI.2511406519 is considered dangerous by lots of security experts. When this infection is active,…

26 mins ago