What is "Backdoor:Win32/Phantom.2_0"?

The Backdoor:Win32/Phantom.2_0 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Phantom.2_0 virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor:Win32/Phantom.2_0?


File Info:
crc32: E6ECE00B
md5: cb5bfe655912085367ff682aad238bd4
name: INISETUP.EXE
sha1: ea0494dbe7c8bee6b467357f16332493c2efb51a
sha256: ba840cd3c282fdb9c11306a23656e87398513b59cb16e06ad72b78276d6419f8
sha512: 7b63f5e1fcccb6362a592eee5660892d48fbfcc44b9ae5d3b81d54858a0239f075b665ad012472e5640dbc8a2802a2915819c892e8c4bf40b4e1fd4d08ee5cce
ssdeep: 12288:AjbCmgskkhkwWG3ionsRg7+bXxYKeIGG/OMt:0CmCkywpngXYKe
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Backdoor:Win32/Phantom.2_0 also known as:

MicroWorld-eScan	Backdoor.Phantom.2.0.A
nProtect	Backdoor.Phantom.2.0.A
CMC	Generic.Win32.cb5bfe6559!MD
ALYac	Backdoor.Phantom.2.0.A
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Backdoor.Phantom.2.0.A
K7GW	Trojan ( 000022a31 )
K7AntiVirus	Trojan ( 000022a31 )
Agnitum	Backdoor.Phantom!0RuN+y5yzmQ
F-Prot	W32/Malware!99f4
Symantec	Backdoor.Trojan
Norman	Suspicious_Gen3.UUKT
TrendMicro-HouseCall	BKDR_PHANTOM.20
Avast	Win32:Trojan-gen
Kaspersky	Backdoor.Win32.Phantom.20.a
NANO-Antivirus	Trojan.Win32.Phantom.gnaec
Rising	PE:Trojan.Win32.Generic.122B3DC9!304823753
Ad-Aware	Backdoor.Phantom.2.0.A
Sophos	Troj/Bckdr-EZI
Comodo	Backdoor.Win32.Phantom.20.A
F-Secure	Backdoor.Phantom.2.0.A
DrWeb	BackDoor.Phantom.20
Zillya	Backdoor.Phantom.Win32.4
TrendMicro	BKDR_PHANTOM.20
McAfee-GW-Edition	BackDoor-SX
Emsisoft	Backdoor.Phantom.2.0.A (B)
Cyren	W32/Risk.JROS-0129
Avira	BDC/Phantom.20
Antiy-AVL	Trojan[Backdoor]/Win32.Phantom
Kingsoft	Win32.Hack.Phantom.21.(kcloud)
Microsoft	Backdoor:Win32/Phantom.2_0
AhnLab-V3	Win-Trojan/Phantom.561152
GData	Backdoor.Phantom.2.0.A
McAfee	BackDoor-SX
AVware	Trojan.Win32.Generic!BT
VBA32	Backdoor.Phantom.2_0.a
Panda	Backdoor Program.LC
ESET-NOD32	Win32/Phantom.20.A
Fortinet	W32/BDoor.20!tr.bdr
AVG	BackDoor.Phantom
Baidu-International	Backdoor.Win32.Phantom.aYwJ
Qihoo-360	Win32/Backdoor.7bd

How to remove Backdoor:Win32/Phantom.2_0?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Backdoor:Win32/Phantom.2_0”?