How to remove “Backdoor:Win32/Scarab.2_1”?

The Backdoor:Win32/Scarab.2_1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/Scarab.2_1 virus can do?

Authenticode signature is invalid

How to determine Backdoor:Win32/Scarab.2_1?


File Info:
name: 5FEC473E3E21ADA17E6B.mlw
path: /opt/CAPEv2/storage/binaries/c3646ab322d88ad5fc45a959bb82497611c80e094ffbef2247e07cda1060c1a6
crc32: 3BE8A075
md5: 5fec473e3e21ada17e6b96e023f7fdac
sha1: 90685a7aeeeeb521adee3f24d780dd98b272f3f4
sha256: c3646ab322d88ad5fc45a959bb82497611c80e094ffbef2247e07cda1060c1a6
sha512: 19d91ad673e4e4d38534e09bd4833ec9e4758dd68b52da576577ff10c6d5260a3004e24340e6526a19a479132b468d055c88a10e8d9b23b7732143115f50e128
ssdeep: 12288:xqhML/fffffffEj3r3vPPoAidUF+S35Icm:KjDlF+S35Ic
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T191D5E3A7F9649B52C6CC8DF06C2D79E4D810CEE1CE98F17BA017F1E91E39A6B8D41850
sha3_384: 2673ed3da33a63a0ec2dff8ac148a7bc12614ba4cc41094d309957704561bab39903148681f55d9bf71f2ae8104ae4cb
ep_bytes: 68a0976400e8eeffffff0000fc936400
timestamp: 2000-01-28 01:36:29

Version Info:
Translation: 0x0409 0x04b0
Comments:  
CompanyName:  
FileDescription:  
LegalCopyright:  
LegalTrademarks:  
ProductName: Scarab ;-)
FileVersion: 2.01.0103
ProductVersion: 2.01.0103
InternalName: scarab
OriginalFilename: scarab.exe

Backdoor:Win32/Scarab.2_1 also known as:

Lionic	Trojan.Win32.Scarab.m!c
tehtris	Generic.Malware
MicroWorld-eScan	Backdoor.Scarab
FireEye	Backdoor.Scarab
ALYac	Backdoor.Scarab
Cylance	Unsafe
VIPRE	Backdoor.Scarab
K7AntiVirus	Trojan ( 0055e3df1 )
Alibaba	Backdoor:Win32/Scarab.638d6c42
K7GW	Trojan ( 0055e3df1 )
Cybereason	malicious.e3e21a
VirIT	Backdoor.Win32.Scarab.C
Cyren	W32/Risk.NVLI-9068
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/TrojanDropper.Scarab.21
Kaspersky	Backdoor.Win32.Scarab.21
BitDefender	Backdoor.Scarab
NANO-Antivirus	Trojan.Win32.Scarab.hfgx
Avast	Win32:Malware-gen
Tencent	Win32.Backdoor.Scarab.Xylw
Ad-Aware	Backdoor.Scarab
TACHYON	Backdoor/W32.Scarab.3005952
Sophos	Troj/Bdoor-QA
Comodo	TrojanDropper.Win32.Scarab.21@3365
DrWeb	BackDoor.Scarab
Zillya	Backdoor.Scarab.Win32.5
TrendMicro	BKDR_SCARAB.A
McAfee-GW-Edition	BackDoor-QA
Emsisoft	Backdoor.Scarab (B)
GData	Backdoor.Scarab
Jiangmin	Backdoor/Scarab.21
Webroot	W32.Trojan.Trojan-Backdoor.Gen.
Google	Detected
Avira	BDC/Scarab.21.Cli
Antiy-AVL	Trojan/Generic.ASMalwS.11EC
Kingsoft	Win32.Hack.Scarab.21.(kcloud)
Arcabit	Backdoor.Scarab
ViRobot	Backdoor.Win32.Scarab_21.Client
Microsoft	Backdoor:Win32/Scarab.2_1
Cynet	Malicious (score: 99)
AhnLab-V3	Backdoor/Win32.Scarab.C229683
McAfee	BackDoor-QA
MAX	malware (ai score=100)
VBA32	Backdoor.Scarab
TrendMicro-HouseCall	BKDR_SCARAB.A
Rising	Backdoor.Scarab.21.a (CLASSIC)
Yandex	Trojan.GenAsa!pwajmPYpCNo
Ikarus	Backdoor.Scarab
MaxSecure	Trojan.Malware.704583.susgen
Fortinet	W32/BackDoor.Scarab.21104
AVG	Win32:Malware-gen
Panda	Bck/Scarab.21
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Scarab.2_1?

Backdoor:Win32/Scarab.2_1 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X