GridinSoft Threat Intelligence

Backdoor detection reports

Remote-access components that can give an operator control over an affected system.

Detection category

Backdoor threat reports

Remote-access components that can give an operator control over an affected system. ThreatInfo groups these records so analysts and users can review related filenames, hashes, and GridinSoft detection names from one place.

This category page groups related ThreatInfo records so users can compare file names, hashes, publishers, and GridinSoft detection names in one place.

Indexed reports 295

Latest shown 60

Detected 60

Observed detection families

Common Backdoor verdicts

These are the most frequent GridinSoft detection names in the latest reports shown below. Repeated families help users recognize whether a file belongs to a broader campaign or bundled software cluster.

Backdoor.Gen 20 reports

General Threat 20 reports

Hack.Keygen 3 reports

Trojan.Agent 3 reports

Backdoor.Agent 2 reports

Backdoor.DarkKomet 2 reports

Trojan.Gen 2 reports

Adware.YTAdBlock 1 reports

Analyst focus

What to check first

Use this page as a starting point: open the exact file report, compare the MD5 hash, and run a local scan before deciding whether the file is safe.

A known filename appearing with an unexpected hash or location.
Publisher, product, or certificate data that does not match the file origin.
Repeated detections from the same family across recent reports.

Frequent metadata

Publishers and products

Products Project1 8 Microsoft® Windows® Operating System 6 Proyecto1 2 灰鸽子远程管理系统 2 Baidu Antivirus 1 DarkComet-RAT 1

GridinSoft Anti-Malware

Scan for Backdoor detections

If a file from this category appears on your computer, verify the exact report and run a full system scan. GridinSoft Anti-Malware is used to detect and remove threats listed in ThreatInfo reports.

Download scanner

01 Match the hash

Use the MD5 value from the report. A filename alone is not enough because unrelated files can share the same name.

02 Review origin

Check the publisher, product name, certificate, and file path for mismatches or unfamiliar install locations.

03 Scan and remove

If the file is unexpected, scan the device and remove related startup entries, bundled components, and leftover files.

Recent reports

Latest Backdoor file records

baidu_antivirus_v5.4.3.148966.exe a8c07be6a769e7aef4f0d2dba36b7b0e PUP.SystemOptimizer unikeynt.exe 14f1d57345979b8bdb5f5b3ac5f2e462 Backdoor.Gen A0014883.exe 239b5c2b862d9b7ab61af1d49c3f02e3 General Threat srvany 98c467274efe7ac807918f4280411a42 General Threat Mic.dll f4a19d968ff6f5af1601b97f1756d6e3 Backdoor.Gen deepfreeze_keygen.exe 98efcc5726b2a602d4f59240f14dac47 Hack.Keygen A0005850.exe 7df5f447de9e4600f8c77a00d86d210b Hijack.Explorer Keygen Nitro Pro 11.exe 1819895368f5cc033b79462b9e82305e General Threat keygen.exe 26b501988ae2ced2e88f57669ff111b5 Trojan.Agent A0033366.exe 9b4ca977c5822243222aefd3faf1fe9e General Threat LFS.exe.BAK 11d88e066dca381f6c4eaa25eac210a5 General Threat WebBrowserPass.exe 6f74fb553924c4d46e7faa0273e40255 Virtool.NirSoft RainFile.exe 804b54d4624255e077fe91109be8ec05 Trojan.Gen DarkComet_TR.exe 9a7155e3dfe956a9658b1293906478cb Backdoor.Gen keygen.exe 4cd4e934cd8bc7df74be80abee3c49a9 Hack.Keygen IDTE.exe 5f1f296a5edc6826f34b46225164ca2e Adware.YTAdBlock xSafety.sys bbbc9a6cc488cfb0f6c6934b193891eb Hack.Patcher EquationLaser_8E2C06B52F530C9F9B5C2C743A5BB28A 8e2c06b52f530c9f9b5c2c743a5bb28a General Threat EquationLaser_45DF8669908A259A22C44278C2289721 45df8669908a259a22c44278c2289721 General Threat EquationLaser_DE356F2A55B25E04742423B5EC56DE93 de356f2a55b25e04742423b5ec56de93 General Threat EquationLaser_6480843080ADD60B825EFE0532DC727B 6480843080add60b825efe0532dc727b General Threat EquationLaser_C96284363374597A3AC4B07C77E8325B c96284363374597a3ac4b07c77e8325b General Threat EquationLaser_32C53DF631217D0B5F9F46D3A9246715 32c53df631217d0b5f9f46d3a9246715 General Threat 17111717131111121219.exe b4a83dffa8b371c26f48f3cba84dc4ea Backdoor.Gen keygen.exe c816e9f304c0ef4c7a1e6054069e3a57 General Threat keygen.exe 5d6c7644375a6a8170df1d4e88901f51 Hack.Keygen reshacker.exe 2ea6797ecab18c2514ea55d56052be33 General Threat Autorun.exe faf1c1800ce62171d2ec56955121e8f4 General Threat Clear.exe cf2912414fc6eecb997cd79ed875fc4f General Threat NotificationPopup.exe c8d6635d4b1be24a1f39b19c789b90bf Trojan.Agent metro2033plus9tr.exe 4c5a6ea4c18507a51622ccc216f51c59 General Threat Lab01-01.exe bb7425b82141a1c0f7d60e5106676bb1 Trojan.Agent drfone-fone_full1278.exe 12414c9cb6ba6706b32a1433e18830f8 Backdoor.Gen ZAM.exe 4e1486b775fa3848fb1bd53d0cc0e206 Backdoor.Gen MTK_driver.exe 754b13df95c1d4f0a3c8c4aa64d70e1a Backdoor.Gen mi_unlock_en.exe bd62de2538f841bd8cfc6188216c66d8 Backdoor.Gen icsys.icn.exe 2784aeae528701af4bbe77f4bb1f35a6 Backdoor.Gen icsys.icn.exe 0ad132f883965752c79918e8548d0932 Trojan.Gen qimlsrv.exe 613a046982990dec63127997e3d0491a General Threat jqs.exe 686e904785ae10ee1ff463adbb4fe477 Backdoor.Gen SafeIP.exe 90ee40794ac824cafb296e2038b516c5 Backdoor.Gen misc.exe 7a90f8280e5b50f89fec296934aac79d General Threat misc.exe 4da693074ea25b205ec4f6db288ef2cc General Threat misc.exe.D0DF3458_A845_11D3_8D0A_0050046416B9.exe a83d32a9ac751c1844b0c4a5a3a6a4be General Threat Skype.exe 7ca19e8ce23ea5d527ae16a9823e8cf3 Backdoor.Xtrat cleanmem_setup (2019_10_26 12_16_34 UTC).exe b38a43c194f058442544982c8fb46e13 Backdoor.Gen gldriverquery.exe 66686fd39168b39aa99660b4ab8900f7 Backdoor.Agent gldriverquery64.exe 55958497241547bf4999479b4fe126ee Backdoor.Agent GetDBCache_x64.exe 7e113dba49ae9289c5bb47cd2317e00f Backdoor.Gen FastCopy.exe a9e5fcbe4a15f3d8fe572911aec9ca26 Backdoor.Meterpreter GetEseDbInfo.exe 7cf4c7129022471359221a94b3fc8935 Backdoor.Gen DotNetFxDL2.exe 3d8a4f04b0bec8ef5d8263f1788dc563 Backdoor.Gen PureSyncTray.exe e557ad765f09888792d9ce3ee0d3aff6 Backdoor.Gen Proyecto1.exe ffb1babee6f3b7f3fd76b642da815539 Backdoor.DarkKomet Proyecto1.exe 59377f7e5f701fb101d35ce793951288 Backdoor.DarkKomet icsys.icn.exe 15752e1bd95a18ffe72ca9021c57936a Backdoor.Gen msdcsc.exe 22a1dbb0adbdc1940f87085155eff6f5 Backdoor.Fynloski dpinst.exe 2dba078df88bf1d8bf24ccaf8278d410 Backdoor.Gen spoolsv.exe 948b6a03b32ac3547be0d70c9b613132 Backdoor.Gen dpinst64.exe c1347ed8cfabfd0a44b2297c3b655d5b Backdoor.Gen

Questions

Backdoor FAQ

How should I use this category page?

Use it to find recent reports in the same detection family, then open the exact file report and compare the hash, publisher, path, and detection name.

Why can the same filename have different verdicts?

Attackers and bundlers often reuse common filenames, so the MD5 hash and metadata are more reliable than the name alone.

What should I do if a listed file exists on my device?

Do not rely on the filename only. Verify the hash, review the file location, and run a full system scan before keeping or removing it.