Categories: Trojan

Trojan:Win32/Koutodoor.F removal guide

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Koutodoor.F virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan:Win32/Koutodoor.F?


File Info:
name: 3F7AD3D5987FC9C9C4F8.mlwpath: /opt/CAPEv2/storage/binaries/bef7d843cd2973109893f56f57c99f0420251f2402617574eeb909a8e623c6b7crc32: BE55286Amd5: 3f7ad3d5987fc9c9c4f811b541aa9e35sha1: 81b5f206e54bccdb87d0cc462c8b3449a92f38a5sha256: bef7d843cd2973109893f56f57c99f0420251f2402617574eeb909a8e623c6b7sha512: a35b5dae4f9e1b920a016cb422e8a8b6ee2dc6865d3b3b7bb0a6d47fd606f14543800bbdb868d60a3bc057d8bb9d7eb7ea2ca7d7e6c5cae5e8ea8a33202fe008ssdeep: 768:oZVZCbAEhdHWC5tp+CcpxM4+J3AU1c968aZLqrVg89:4wdkC5sM4aAUGCG1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D4E28E513065D335DADF533216972B102FBB6930546398F2CB88CA693BE6F213E23606sha3_384: 0edd8d7abed131b428a859b319c0fd992f101b391fb325ee2b7ef5c438cfe9cc2d19069d7069d5a0d0203e239d355686ep_bytes: 558bec83ec1853565733ff897dfce833timestamp: 2010-05-31 02:37:55
Version Info:
CompanyName: Microsoft CorporationFileDescription: FileVersion: 1, 0, 0, 1LegalCopyright: Copyright 2009ProductVersion: 1, 0, 0, 1Translation: 0x0804 0x04b0

Trojan:Win32/Koutodoor.F also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.l5oD
MicroWorld-eScan	Gen:Variant.Koutodoor.4
FireEye	Generic.mg.3f7ad3d5987fc9c9
CAT-QuickHeal	Trojan.Koutodoor.E
Skyhigh	BehavesLike.Win32.Generic.nh
McAfee	Koutodoor.gen.o
Zillya	Trojan.Koutodoor.Win32.2122
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Backdoor ( 0018738c1 )
Alibaba	Trojan:Win32/Koutodoor.bf09851b
K7GW	Backdoor ( 0018738c1 )
VirIT	Trojan.Win32.Hider.DVN
Symantec	Hacktool.Rootkit
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Koutodoor.GK
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Koutodoor.4
NANO-Antivirus	Trojan.Win32.MLW.crtzd
Avast	Win32:Caxnet [Trj]
Tencent	Rootkit.Win32.Agent.c
Sophos	Mal/Koutodoor-A
Baidu	Win32.Rootkit.Koutodoor.a
F-Secure	Trojan.TR/Rootkit.Gen
VIPRE	Gen:Variant.Koutodoor.4
TrendMicro	RTKT_KTDOOR.SMIA
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Koutodoor.4 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Koutodoor.4
Jiangmin	Backdoor/Koutodoor.px
Google	Detected
Avira	TR/Rootkit.Gen
Antiy-AVL	Trojan/Win32.Unknown
Kingsoft	Win32.HeurC.KVMH008.a
Xcitium	TrojWare.Win32.Zybr.B@1h4wl9
Arcabit	Trojan.Koutodoor.4
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Koutodoor.F
Varist	W32/Koutodoor.K.gen!Eldorado
AhnLab-V3	Win-Trojan/Koutodoor4.Gen
VBA32	BScope.Trojan.Koutodoor
ALYac	Gen:Variant.Koutodoor.4
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	RTKT_KTDOOR.SMIA
Rising	RootKit.Win32.Undef.ctu (CLASSIC)
Yandex	Trojan.GenAsa!wXA5tB775+I
Ikarus	Trojan.Win32.Koutodoor
Fortinet	W32/Koutodoor.D!tr.bdr
AVG	Win32:Caxnet [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)