Categories: BackdoorTrojan

Trojan.Backdoor2.NmZbaaK8fvob removal instruction

The Trojan.Backdoor2.NmZbaaK8fvob is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Backdoor2.NmZbaaK8fvob virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Binary file triggered YARA rule
Anomalous binary characteristics

How to determine Trojan.Backdoor2.NmZbaaK8fvob?


File Info:
name: 40AD4983641DAB0E890F.mlwpath: /opt/CAPEv2/storage/binaries/1260165dec2ca24ff61aaf7684e2a4c596fe7f7d430f4fc37354a2efc4e9443ccrc32: 83B3C681md5: 40ad4983641dab0e890f92c3f358a8e5sha1: b1d9fadbfc2264649c8f11a3a071d6a266354e62sha256: 1260165dec2ca24ff61aaf7684e2a4c596fe7f7d430f4fc37354a2efc4e9443csha512: 6c8d06642b14bb751f1a73fce974b4b633e8713be4389b1122b14477c2958dc72100e69ef56eb02150db26fcea16cc807fd3957102b2338b4c8a22470e253e35ssdeep: 6144:IooZIFH5nu78n5Qw0tneDA/sqhleIc0HftDrkYY1hj63hgDonsogCh6NEpAF2:ISF1o85bM3npxYfj63hgD1Zittype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T182D41902FFE99135F6F31B31AEB592615A7ABC619D35C24F23C41A0D09B0990EA75B33sha3_384: 2b5ce1a5ce0d1dd33ac700bcc532c46af108f27fd26dbe2fd814ee8c324a7aec0a98ac04fab16a2b24d19093bc319715ep_bytes: b800624100ffe0cde22fd4b187376831timestamp: 2002-07-11 04:39:26
Version Info:
0: [No Data]

Trojan.Backdoor2.NmZbaaK8fvob also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Trojan.Backdoor2.NmZbaaK8fvob
FireEye	Generic.mg.40ad4983641dab0e
Skyhigh	BehavesLike.Win32.Backdoor.jm
ALYac	Gen:Trojan.Backdoor2.NmZbaaK8fvob
Malwarebytes	Ipamor.Trojan.RAT.DDS
Zillya	Trojan.Ipamor.Win32.2320
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Virus:Win32/Ipamor.04fbf6e8
K7GW	Trojan ( 005568151 )
K7AntiVirus	Trojan ( 005568151 )
Symantec	W32.HLLP.Ipamor
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Ipamor.G
APEX	Malicious
ClamAV	Win.Trojan.Ipamor-10026064-0
Kaspersky	Trojan-Dropper.Win32.Daws.fjgj
BitDefender	Gen:Trojan.Backdoor2.NmZbaaK8fvob
Avast	Win32:Ipamor
Tencent	Virus.Win32.Viking.aak
Emsisoft	Gen:Trojan.Backdoor2.NmZbaaK8fvob (B)
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
DrWeb	Trojan.MulDrop26.36640
VIPRE	Gen:Trojan.Backdoor2.NmZbaaK8fvob
Trapmine	malicious.high.ml.score
Sophos	W32/Systro-AB
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=88)
Jiangmin	Trojan.Generic.durje
Google	Detected
Avira	TR/Crypt.ZPACK.Gen
Varist	W32/Ipamor.EV.gen!Eldorado
Antiy-AVL	Trojan[Dropper]/Win32.Agent.a
Kingsoft	malware.kb.b.970
Microsoft	Virus:Win32/Ipamor.A
Arcabit	Trojan.Backdoor2.NmZbaaK8fvob
ZoneAlarm	Trojan-Dropper.Win32.Daws.fjgj
GData	Gen:Trojan.Backdoor2.NmZbaaK8fvob
Cynet	Malicious (score: 100)
McAfee	Artemis!40AD4983641D
VBA32	Virus.Facepalm.231207
Cylance	unsafe
Panda	Trj/Genetic.gen
Zoner	Virus.Win32.31992
Rising	Worm.Soltern!1.BB24 (CLASSIC)
Yandex	Trojan.GenAsa!ZrrESZE1bkM
Ikarus	PUA.DomainIQ
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Parite.C
BitDefenderTheta	Gen:NN.ZexaF.36802.NmZbaaK8fvob
AVG	Win32:Ipamor
DeepInstinct	MALICIOUS
alibabacloud	Trojan[dropper]:Win/Ipamor.G