Backdoor:Win32/Lecna.H!dha removal instruction

The Backdoor:Win32/Lecna.H!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/Lecna.H!dha virus can do?

Authenticode signature is invalid

How to determine Backdoor:Win32/Lecna.H!dha?


File Info:
name: 6801AFE50DC75B8DB4B2.mlw
path: /opt/CAPEv2/storage/binaries/7b4a559228c5349809aa6d4e40c5803e32075576c8cf667431932d3632fa6c9b
crc32: 2879CBD6
md5: 6801afe50dc75b8db4b2e6c6f322a575
sha1: 769aa0ec11b60a14625d879df1d59e50b291193d
sha256: 7b4a559228c5349809aa6d4e40c5803e32075576c8cf667431932d3632fa6c9b
sha512: 076c24a5d85de0f8ba79ad266f9f911cdedc54f779a2b87ea3df938e77f50cd1a0c95a5c4b069cef5d7e9cccb213e8e81a8342586fb6d1695625077570459954
ssdeep: 3072:9NB1ge5pUePB5aKrR+DVsRfnRZzFPk2I111KYTI1Uk1ys:51jpUePB5aKrR+D2FPHMzTy1R
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10FD39E86B583E45AD86E0D30C510D4E18F7BB876ADD5588BF7D0B60EBDE2212B41372B
sha3_384: 1650d8bffa4ea0f08d2ab7ea25ea3060518af03ec8cb8513a9fcd65c82925cca31c5d267fb3ff79d75e1596fab56e393
ep_bytes: 8bec609ce99b4000000068707f400064
timestamp: 2013-04-22 19:59:47

Version Info:
Comments: Opera Internet Browser
CompanyName: Opera Software
FileDescription: Opera Internet Browser
FileVersion: 1055 (1)
InternalName: Opera
LegalCopyright: Copyright Opera Software 1995-
LegalTrademarks: 
OriginalFilename: Opera.exe
PrivateBuild: 
ProductName: Opera Internet Browser
ProductVersion: 11.00
SpecialBuild: 
Translation: 0x0409 0x04b0

Backdoor:Win32/Lecna.H!dha also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Exnet.4!c
DrWeb	Trojan.DownLoader7.62432
MicroWorld-eScan	Generic.ShellCode.Marte.J.274CA82D
FireEye	Generic.mg.6801afe50dc75b8d
CAT-QuickHeal	Backdoor.Lecna.18662
ALYac	Generic.ShellCode.Marte.J.274CA82D
Cylance	unsafe
Zillya	Trojan.Lecna.Win32.95
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0059b8b41 )
Alibaba	Backdoor:Win32/Lecna.d477fb82
K7GW	Trojan ( 0059b8b41 )
Cybereason	malicious.50dc75
BitDefenderTheta	Gen:NN.ZexaF.36348.iq0@aeLrCMli
Cyren	W32/Lecna.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Lecna.AF
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.ShellCode.Marte.J.274CA82D
NANO-Antivirus	Virus.Win32.Gen.ccmw
Avast	Win32:MalOb-FE [Cryp]
Tencent	Malware.Win32.Gencirc.10bde893
Emsisoft	Generic.ShellCode.Marte.J.274CA82D (B)
F-Secure	Trojan.TR/Patched.Gen
VIPRE	Generic.ShellCode.Marte.J.274CA82D
TrendMicro	TrojanSpy.Win32.EMOTET.SMQB.hp
McAfee-GW-Edition	BehavesLike.Win32.Sality.ch
Trapmine	suspicious.low.ml.score
Sophos	Mal/PePatch-Y
Ikarus	Trojan.Win32.Winnti
GData	Generic.ShellCode.Marte.J.274CA82D
Jiangmin	Trojan.GenericML.yh
Avira	TR/Patched.Gen
MAX	malware (ai score=88)
Antiy-AVL	Trojan[Downloader]/Win32.Unknown
Arcabit	Generic.ShellCode.Marte.J.274CA82D
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Backdoor:Win32/Lecna.H!dha
Google	Detected
AhnLab-V3	Win-Trojan/Downloader.57344.AAQ
McAfee	GenericRXUS-CH!6801AFE50DC7
VBA32	Trojan.Downloader
Malwarebytes	Malware.AI.2893048996
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMQB.hp
Rising	Backdoor.Hupigon!8.B57 (TFE:3:9ZR3ES2hAvB)
Yandex	Trojan.Lecna!zrhOwmPHJrQ
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.185628869.susgen
Fortinet	W32/GenKryptik.GCTV!tr
AVG	Win32:MalOb-FE [Cryp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Lecna.H!dha?

Backdoor:Win32/Lecna.H!dha removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X