Categories: Backdoor

Should I remove “Backdoor:Win32/Mirai.A”?

The Backdoor:Win32/Mirai.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Mirai.A virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Backdoor:Win32/Mirai.A?


File Info:
crc32: 2889DE99md5: d9c32681d65c18d9955f5db42154a0f3name: u.exesha1: 4678e87a393fedeed58c2a151efef17e221b161fsha256: c2ef46a1b6292f28c0caf08013577e8559c4b0a71bf6fc058968061a3d71ede2sha512: cf06c8d4b97dfc33f45d854db4d9a94a8f652e6f25b642ff54846f05f83f033960174253cfd932a251850db0af021c356e6e2244f218360941dd36cdf5f2822dssdeep: 768:uBjqgvACIryYcS8s3AslF+1kcyIFRg7zP1rMIo:ZCYrP+1kRIFRuPRMIotype: PE32 executable (console) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: 2016InternalName: MyFileVersion: 1.0.0.1CompanyName: OrgsPrivateBuild: LegalTrademarks: Comments: ProductName: Orgs psSpecialBuild: ProductVersion: 1.0.0.1FileDescription: MyOriginalFilename: ps.exeTranslation: 0x0400 0x04b0

Backdoor:Win32/Mirai.A also known as:

DrWeb	Trojan.DnsChange.10846
MicroWorld-eScan	Gen:Variant.Graftor.632444
FireEye	Generic.mg.d9c32681d65c18d9
CAT-QuickHeal	Trojan.Mauvaise.SL1
Qihoo-360	Win32/Trojan.2ff
McAfee	RDN/Generic BackDoor
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0000a4ad1 )
BitDefender	Gen:Variant.Graftor.632444
K7GW	Trojan ( 005606201 )
Cybereason	malicious.a393fe
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34090.cmKfayaZ0aeb
Symantec	Trojan Horse
APEX	Malicious
Paloalto	generic.ml
GData	Gen:Variant.Graftor.632444
Kaspersky	Trojan-Downloader.Win32.WannaMine.g
Alibaba	TrojanDownloader:Win32/WannaMine.25e0450e
NANO-Antivirus	Trojan.Win32.DnsChange.gkqfxb
ViRobot	Trojan.Win32.Z.Graftor.38400
Tencent	Malware.Win32.Gencirc.10b863f0
Endgame	malicious (moderate confidence)
Sophos	Troj/Myking-B
Comodo	Malware@#3fvsmxb1h561f
F-Secure	Trojan.TR/Spy.Gen
Zillya	Trojan.Agent.Win32.1208856
TrendMicro	TROJ_GEN.R020C0DL119
McAfee-GW-Edition	RDN/Generic BackDoor
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.Agent (A)
Ikarus	Trojan.Win32.Agent
Cyren	W32/Trojan.LEGL-8209
Jiangmin	TrojanDownloader.WannaMine.a
Webroot	W32.Malware.gen
Avira	TR/Spy.Gen
Antiy-AVL	Trojan[Downloader]/Win32.WannaMine
Arcabit	Trojan.Graftor.D9A67C
ZoneAlarm	Trojan-Downloader.Win32.WannaMine.g
Microsoft	Backdoor:Win32/Mirai.A
AhnLab-V3	Malware/Win32.Generic.C1911290
Acronis	suspicious
ALYac	Trojan.DNSChanger
MAX	malware (ai score=100)
VBA32	BScope.Trojan.DnsChange
Malwarebytes	Adware.Elex
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Agent.TZB
TrendMicro-HouseCall	TROJ_GEN.R020C0DL119
Rising	Trojan.Agent!1.A984 (CLOUD)
Yandex	Trojan.DL.WannaMine!
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Agent.TZB!tr
Ad-Aware	Gen:Variant.Graftor.632444
AVG	FileRepMalware
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.74721527.susgen