Categories: Backdoor

Backdoor:Win32/Prisos.A removal instruction

The Backdoor:Win32/Prisos.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Prisos.A virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Reads data out of its own binary image
Unconventionial language used in binary resources: Arabic (Egypt)
Authenticode signature is invalid
Installs itself for autorun at Windows startup
Creates a hidden or system file

How to determine Backdoor:Win32/Prisos.A?


File Info:
name: CF2924E55511FCFA52B5.mlwpath: /opt/CAPEv2/storage/binaries/855047b19679427acd5d11bfbda6ef538e3a79c23b83d3ee182177865872b812crc32: A9FB6A68md5: cf2924e55511fcfa52b5f11595537b20sha1: 20d5d70ff358746d4f0e8932869e511af35cd488sha256: 855047b19679427acd5d11bfbda6ef538e3a79c23b83d3ee182177865872b812sha512: 08e56d2370f10bc933715ee0230b706f5fb99e9516bb1a7696e87de5a04efd45e490de792dae22e1a7bbf476bac4fc0b278c341e12358cac4a2b09699b1715a7ssdeep: 1536:6mVZQJxFnGqow0B2Kvfqf/rpRq+cx6xKvqEam:6mgxGqow0B2KvMJxKvqOtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14A532A37B8D58C62F586A57504364B7A6E3BF8711694838B9F106E6D2C32390EE3934Bsha3_384: 5e28b1d32cefe4dbe56566aca12493d1b45e7afbe339d1c086ebe5865b00eeb1b2121c0afca852f96478d1a64f4a6d32ep_bytes: 558bec6aff684071400068144f400064timestamp: 2007-12-06 05:24:26
Version Info:
0: [No Data]

Backdoor:Win32/Prisos.A also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doina.11608
FireEye	Generic.mg.cf2924e55511fcfa
McAfee	BackDoor-YA.a
Cylance	Unsafe
VIPRE	Backdoor.Win32.Prisos.A (v)
K7AntiVirus	Trojan ( 004d07a21 )
K7GW	Trojan ( 004d07a21 )
Cybereason	malicious.55511f
Baidu	Win32.Backdoor.Prisos.b
VirIT	Trojan.Win32.TianYan.B
Cyren	W32/Trojan.HMGX-6351
Symantec	W32.Killaut.A
ESET-NOD32	Win32/Prisos.A
APEX	Malicious
ClamAV	Win.Spyware.35814-2
Kaspersky	Trojan.Win32.Agent.netfau
BitDefender	Gen:Variant.Doina.11608
NANO-Antivirus	Trojan.Win32.TianYan.cqjjhu
Avast	Win32:Dropper-FJM [Drp]
Tencent	Malware.Win32.Gencirc.10b18485
Ad-Aware	Gen:Variant.Doina.11608
Sophos	Troj/Agent-ICR
Comodo	TrojWare.Win32.TrojanSpy.TianYan.~A@1qz4h
DrWeb	Win32.HLLP.Nemesis.28687
TrendMicro	TSPY_TIANYAN.SMD
McAfee-GW-Edition	BackDoor-YA.a
Emsisoft	Gen:Variant.Doina.11608 (B)
GData	Gen:Variant.Doina.11608
Jiangmin	TrojanSpy.TianYan.a
eGambit	Unsafe.AI_Score_66%
Avira	TR/Spy.Genome.rlce
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.AE45
Kingsoft	Heur.SSC.2622419.1216.(kcloud)
ViRobot	Trojan.Win32.TianYan.40960
Microsoft	Backdoor:Win32/Prisos.A
Cynet	Malicious (score: 99)
AhnLab-V3	Worm/Win32.Mabezat.R26794
BitDefenderTheta	Gen:NN.ZexaCO.34114.dqY@aOJOHJcO
ALYac	Gen:Variant.Doina.11608
VBA32	BScope.Trojan-Spy.Zbot
Malwarebytes	Malware.AI.825262803
TrendMicro-HouseCall	TSPY_TIANYAN.SMD
Rising	Trojan.Spy.Win32.TianYan.a (RDMK:cmRtazqfQge9rhDQzrzwofJL50yf)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.1F6EC8!tr
AVG	Win32:Dropper-FJM [Drp]
CrowdStrike	win/malicious_confidence_90% (W)