Backdoor

Dropped:Backdoor.Singu.M removal instruction

Malware Removal

The Dropped:Backdoor.Singu.M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dropped:Backdoor.Singu.M virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
frip.yeah.net

How to determine Dropped:Backdoor.Singu.M?


File Info:

crc32: 498ACFC0
md5: 2efc66121920f922845add8bc11fc24c
name: 2EFC66121920F922845ADD8BC11FC24C.mlw
sha1: 15ae97058db1604b52b999dfe30a166fabb0f9dc
sha256: ac565adfbafcf94fd20fccf4e33f06737657dd9df79454bd93c1bb08f3c15f75
sha512: 45539e7e6e2850989b539c1110f0e86b7e49d28a9320429f7b58bdba018f0aa10cc6fbf0f19b5ba0e045e1b1431df80d00b4fa9025cae890cc6b3e7a4f7d975f
ssdeep: 6144:EXgrlPiOSBObghDB9GR072UPDIWOSYXwNL:EXgBiOSBgU9l7vPESL9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Dropped:Backdoor.Singu.M also known as:

K7AntiVirusTrojan ( 00002da91 )
DrWebBackDoor.Singu
ClamAVWin.Trojan.Viking-8014467-1
ALYacDropped:Backdoor.Singu.M
ZillyaBackdoor.Singu.Win32.353
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Starter.ali2000005
K7GWTrojan ( 00002da91 )
Cybereasonmalicious.21920f
SymantecInfostealer
ESET-NOD32Win32/Singu.M
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Singu.m
BitDefenderDropped:Backdoor.Singu.M
NANO-AntivirusTrojan.Win32.Singu.dnje
ViRobotBackdoor.Win32.A.Singu.573952[ASPack]
MicroWorld-eScanDropped:Backdoor.Singu.M
Ad-AwareDropped:Backdoor.Singu.M
SophosTroj/Singu-M
ComodoBackdoor.Win32.Singu.A@f7y5q
BitDefenderThetaAI:Packer.6E5A0B381F
VIPREBackdoor.Win32.Delf.axh (fs)
McAfee-GW-EditionBehavesLike.Win32.Ipamor.cc
FireEyeGeneric.mg.2efc66121920f922
EmsisoftDropped:Backdoor.Singu.M (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor/Heidong2004.f
WebrootW32.Malware.Gen
AviraTR/Spy.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.1F7DF
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmBackdoor.Win32.Singu.m
GDataDropped:Backdoor.Singu.M
McAfeeGeneric BackDoor.d
MAXmalware (ai score=100)
VBA32TScope.Trojan.Delf
PandaBck/Singu.AE
RisingBackdoor.BlackHole.bl (CLASSIC)
IkarusBackdoor.Win32.BlackHole
FortinetW32/Singu.M!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Backdoor.Generic.HgAASRAA

How to remove Dropped:Backdoor.Singu.M?

Dropped:Backdoor.Singu.M removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment