What is “Backdoor:Win32/Bandok!A”?

The Backdoor:Win32/Bandok!A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/Bandok!A virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs

How to determine Backdoor:Win32/Bandok!A?


File Info:
crc32: F410CA7B
md5: d398a07e1e44a4af8b0f4be05184ac09
name: D398A07E1E44A4AF8B0F4BE05184AC09.mlw
sha1: 901d0983ed43efc7f2e7265e2d8d5eeea50d3a59
sha256: 58ea23d0b59fdffcf23dad14d1d79ef101fb9d21821d1107818e3d085ba11b76
sha512: e14e6ee50ebd5cf932c0d084bd0d798b2f7daa2da6d383ba222101dd25f5e9eef83737857be0053c46ce57b99c150e096b07a44a5852425d8c0f876b2d5fa5bd
ssdeep: 6144:lZ3nSa5hHQmx5jb4IwiWTB6WeM+++POsmgX:DSmwm7/uiWTczX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Backdoor:Win32/Bandok!A also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	BackDoor.Spy.754
ALYac	Backdoor.Bandok.BJ
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
ESET-NOD32	a variant of Win32/Bandok.NAH
APEX	Malicious
Avast	Win32:Bandok-R [Trj]
Cynet	Malicious (score: 100)
BitDefender	Backdoor.Bandok.BJ
NANO-Antivirus	Trojan.Win32.Bandok.dyxybw
MicroWorld-eScan	Backdoor.Bandok.BJ
Ad-Aware	Backdoor.Bandok.BJ
Sophos	Mal/Bandook-A
F-Secure	Trojan.TR/Crypt.XPACK.Gen3
BitDefenderTheta	AI:Packer.D36FF5501E
FireEye	Generic.mg.d398a07e1e44a4af
Emsisoft	Backdoor.Bandok.BJ (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen3
eGambit	Unsafe.AI_Score_99%
Microsoft	Backdoor:Win32/Bandok.gen!A
Arcabit	Backdoor.Bandok.BJ
GData	Backdoor.Bandok.BJ
McAfee	Artemis!D398A07E1E44
MAX	malware (ai score=85)
VBA32	BScope.Trojan.Downloader
Malwarebytes	MachineLearning/Anomalous.100%
AVG	Win32:Bandok-R [Trj]

How to remove Backdoor:Win32/Bandok!A?

Backdoor:Win32/Bandok!A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X