Backdoor • Trojan

Trojan.Backdoor.POP information

The Trojan.Backdoor.POP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Backdoor.POP virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan.Backdoor.POP?


File Info:
name: 0B1627357CC31EE175FB.mlw
path: /opt/CAPEv2/storage/binaries/03e394689242f6420edb00656fb9338b12fd0d3681f1a95b89cf9cfdd339630d
crc32: 014E6D9E
md5: 0b1627357cc31ee175fb0627f775d05f
sha1: 0a959d4370dc808df503add58a860847ed062c2e
sha256: 03e394689242f6420edb00656fb9338b12fd0d3681f1a95b89cf9cfdd339630d
sha512: 3f1fff9043550164053ae1c98f40ea70768febd8d134ec8a18a8c5cbb39c9013052282e02a3fb639a57f3f381171da693df6562be0a5af34d6ea8a12b1d40ddb
ssdeep: 96:w9dKSNpu7v5gh5eAmMogw9lB7S+L7zkUoNd6SSfUfWUnQe+fHC/Kma+0m:j+I5q1ULPoNdhSfYWTfHCC4
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1F8D1C70E3BF8CE1AD0BF4774A4B28F125B32F6568637DB5F0C8A216C4D623051A99F95
sha3_384: 5046376b44a7d89ac93aa55b5f374c751297b110df12e2918652fee3d7b4ef299a9ef56dedb43933c76d3d1fa856656e
ep_bytes: ff250020400000000000000000000000
timestamp: 2008-10-13 03:37:30

Version Info:
Translation: 0x0000 0x04b0
Comments:  
CompanyName:  
FileDescription:  
FileVersion: 0.0.0.0
InternalName: fso.dll
LegalCopyright:  
LegalTrademarks:  
OriginalFilename: fso.dll
ProductName:  
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan.Backdoor.POP also known as:

Bkav	W32.Common.1DBA3377
Lionic	Hacktool.Win32.Agent.3!c
Skyhigh	RDN/Generic PUP.z
McAfee	RDN/Generic PUP.z
Cylance	unsafe
Sangfor	PUP.Msil.Agent.Veys
Alibaba	HackTool:MSIL/Generic.43296f1b
K7GW	Hacktool ( 0057a4221 )
K7AntiVirus	Hacktool ( 0057a4221 )
Arcabit	Trojan.Backdoor.POP
VirIT	Backdoor.Win32.Generic.KRY
Symantec	Backdoor.Trojan
ESET-NOD32	a variant of MSIL/HackTool.CCdoor.A.gen
Kaspersky	HackTool.MSIL.Agent.gqx
BitDefender	Trojan.Backdoor.POP
NANO-Antivirus	Trojan.Win32.IVOU0942.flikyt
MicroWorld-eScan	Trojan.Backdoor.POP
Avast	Win32:Malware-gen
Tencent	Msil.Hacktool.Agent.Nzfl
Emsisoft	Trojan.Backdoor.POP (B)
VIPRE	Trojan.Backdoor.POP
TrendMicro	HKTL_CCDOOR
Sophos	Generic Reputation PUA (PUA)
Jiangmin	HackTool.MSIL.deg
Antiy-AVL	HackTool/MSIL.Agent
Kingsoft	MSIL.HackTool.Agent.gqx
Microsoft	PUA:Win32/Presenoker
ZoneAlarm	HackTool.MSIL.Agent.gqx
GData	Trojan.Backdoor.POP
ALYac	Trojan.Backdoor.POP
TrendMicro-HouseCall	HKTL_CCDOOR
MaxSecure	Trojan.Malware.5837152.susgen
Fortinet	Riskware/BackDoor
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan.Backdoor.POP?

Trojan.Backdoor.POP removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X