Backdoor.Smadow.gen!A

By Domesticus in Backdoors

Threat Scorecard

Threat Level:	60 % (Medium)
Infected Computers:	298

First Seen:	June 28, 2011
Last Seen:	December 25, 2020
OS(es) Affected:	Windows

Backdoor.Smadow.gen!A is a hazardous backdoor Trojan infection that is able to install on your computer system without your consent and then download and execute various files without your knowledge. Backdoor.Smadow.gen!A is used for online advertising, which means that it can automatically send certain advertisements to you, when you browse the web. Backdoor.Smadow.gen!A is a part of a rogue delivery system and it can be advertising a bogus security application. When Backdoor.Smadow.gen!A is installed on your computer system, it modifies registry entries so that it could run automatically whenever you start your Windows. Backdoor.Smadow.gen!A can show random pop-up notifications onto your screen. Backdoor.Smadow.gen!A will offer you to download another malicious application or it will download and execute it itself. Thus, you should remove Backdoor.Smadow.gen!A and its related components from your computer immediately.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Panda	Generic Malware
AVG	BackDoor.Agent.AKZG
Fortinet	W32/Kryptik.NPU!tr
Ikarus	Trojan-Dropper.Agent
AhnLab-V3	Win-Trojan/Smadow.106496
Antiy-AVL	Backdoor/Win32.Agent.gen
eTrust-Vet	Win32/Smadow.D
AntiVir	TR/Kazy.SB
DrWeb	BackDoor.Bho.254
BitDefender	Gen:Variant.Kazy.18287
Kaspersky	Backdoor.Win32.Agent.bhio
eSafe	Win32.Agent.Slc
Avast	Win32:Malware-gen
Symantec	Backdoor.Trojan
NOD32	Win32/Agent.SLC

SpyHunter Detects & Remove Backdoor.Smadow.gen!A

File System Details

Backdoor.Smadow.gen!A may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	ZiggyTVSvc.exe	b7e63cdb3799a84bfd8b6c1b606e7f18	171
Name: ZiggyTVSvc.exe MD5: b7e63cdb3799a84bfd8b6c1b606e7f18 Size: 253.21 KB (253216 bytes) Detections: 171 Type: Executable File Path: %PROGRAMFILES%\ZiggyTV Toolbar Group: Malware file Last Updated: July 11, 2011
2.	questscan143.exe	74dc588d6dfd0f10ae6616dda65065cd	98
Name: questscan143.exe MD5: 74dc588d6dfd0f10ae6616dda65065cd Size: 30.2 KB (30208 bytes) Detections: 98 Type: Executable File Path: %ALLUSERSPROFILE%\QuestScan Group: Malware file Last Updated: June 29, 2011
3.	.exe	d07f350f770cf79b882e89b720ce6734	5
Name: .exe MD5: d07f350f770cf79b882e89b720ce6734 Size: 106.49 KB (106496 bytes) Detections: 5 Type: Executable File Path: %LOCALAPPDATA%\{DC77E0CA-0E8A-E6ED-FB63-BAE52BA8F167} Group: Malware file Last Updated: December 25, 2020
4.	csrss.exe	abb25de024cebb959627861d9156c77d	5
Name: csrss.exe MD5: abb25de024cebb959627861d9156c77d Size: 187.9 KB (187904 bytes) Detections: 5 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: July 18, 2011
5.	csrss.exe	f76aea2da34072184b10d71c552e563f	4
Name: csrss.exe MD5: f76aea2da34072184b10d71c552e563f Size: 209.4 KB (209408 bytes) Detections: 4 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: July 13, 2011
6.	ZiggyTVSvc.exe	05444194aa771b0a5f272cb53b5bc505	3
Name: ZiggyTVSvc.exe MD5: 05444194aa771b0a5f272cb53b5bc505 Size: 252.7 KB (252704 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES%\ZiggyTV Toolbar Group: Malware file Last Updated: June 29, 2011
7.	csrss.exe	84e959db0a3b5b672c65e23ab5e8bbcf	3
Name: csrss.exe MD5: 84e959db0a3b5b672c65e23ab5e8bbcf Size: 177.15 KB (177152 bytes) Detections: 3 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: July 7, 2011
8.	.exe	58fae01c3a03551e6994e134d2a2ffb0	2
Name: .exe MD5: 58fae01c3a03551e6994e134d2a2ffb0 Size: 85.5 KB (85504 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\{DA6994BC-F559-C034-4895-1D04AA5DE6D5} Group: Malware file Last Updated: June 28, 2011
9.	stpass.exe
Name: stpass.exe Type: Executable File Group: Malware file
10.	%AppData%\\{5E4E0482-F9E5-3F8D-1ABD-0A82AB713F82}\\.exe
Name: %AppData%\\{5E4E0482-F9E5-3F8D-1ABD-0A82AB713F82}\\.exe Type: Executable File Group: Malware file
11.	questscan143.exe
Name: questscan143.exe Type: Executable File Group: Malware file

Registry Details

Backdoor.Smadow.gen!A may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyOverride' = ''

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System 'DisableTaskMgr' = '1'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\.shell

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Backdoor.Smadow.gen!A

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Backdoor.Smadow.gen!A

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen