Backdoor

Backdoor.IRCBot.ACKU removal instruction

Malware Removal

The Backdoor.IRCBot.ACKU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.IRCBot.ACKU virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Compression (or decompression)
  • Creates RWX memory
  • Drops a binary and executes it
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
fix.burimilol.com

How to determine Backdoor.IRCBot.ACKU?


File Info:

crc32: 66F09898
md5: 1d753662fae3b64c807f2f2d558f97d0
name: 1D753662FAE3B64C807F2F2D558F97D0.mlw
sha1: 1791922d38f51ff15d04929e49c1c5f6a433d368
sha256: 12d85eaea84763d9dc07c863564afbd507df26f16ee0a3f66e59b6cc2e30389e
sha512: fcff4aa4b0b7246a650c452a287c852bb8aa5dcc42677d9fed898438212b52311bd71ef9a9dbe5b806a19ae56745c3dbfab69289c94baf000e67f207c057d336
ssdeep: 6144:vq4GiO1H8DFLRK2fBXXBN8MoaU1a0JV355Hc4PHKkOQB0CEj881OeYBvNO9dnXm:DO1H2hRK2pXLa1bCkxeCa88keYbmdn2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Backdoor.IRCBot.ACKU also known as:

K7AntiVirusBackdoor ( 000518491 )
LionicTrojan.Win32.Buzus.ldqJ
Elasticmalicious (high confidence)
DrWebBackDoor.IRC.Sdbot.3858
CynetMalicious (score: 100)
CMCGeneric.Win32.1d753662fa!CMCRadar
ALYacBackdoor.IRCBot.ACKU
CylanceUnsafe
ZillyaBackdoor.SdBot.Win32.3155
SangforTrojan.Win32.Generic.ky
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaVirTool:Win32/DelfInject.db272a1d
K7GWBackdoor ( 000518491 )
Cybereasonmalicious.2fae3b
CyrenW32/Backdoor.JRQW-4598
SymantecW32.IRCBot.Gen
ESET-NOD32Win32/IRCBot.AIW
ZonerTrojan.Win32.38
APEXMalicious
AvastWin32:Dropper-BBI [Trj]
ClamAVWin.Trojan.Buzus-1611
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderBackdoor.IRCBot.ACKU
NANO-AntivirusTrojan.Win32.Sdbot.dxjtow
ViRobotBackdoor.Win32.Delf.445440
MicroWorld-eScanBackdoor.IRCBot.ACKU
TencentMalware.Win32.Gencirc.114b9630
Ad-AwareBackdoor.IRCBot.ACKU
SophosMal/Generic-R + Mal/Behav-154
ComodoTrojWare.Win32.Inject.~BAAP@flfz
BitDefenderThetaAI:Packer.F9DE472D21
VIPRETrojan-Spy.Win32.Zbot.gen (v)
TrendMicroTROJ_DELF.SMS
FireEyeGeneric.mg.1d753662fae3b64c
EmsisoftBackdoor.IRCBot.ACKU (B)
JiangminTrojan/Buzus.bvv
WebrootW32.Trojan.Trojan-Buzus
AviraWORM/IRCBot.445952
eGambitUnsafe.AI_Score_96%
Antiy-AVLTrojan/Generic.ASMalwS.17DD57
MicrosoftVirTool:Win32/DelfInject.gen!K
GDataBackdoor.IRCBot.ACKU
AhnLab-V3Trojan/Win32.Buzus.C233931
McAfeeGeneric Dropper.dy
MAXmalware (ai score=100)
VBA32BScope.Backdoor.IRC.Sdbot
PandaW32/OscarBot.UD.worm
TrendMicro-HouseCallTROJ_DELF.SMS
RisingBackdoor.IRCBot!1.9860 (CLASSIC)
YandexTrojan.GenAsa!BhqDkn5x44k
IkarusTrojan.Delf.OUX
MaxSecureTrojan.Malware.760832.susgen
FortinetW32/Injector.fam!tr
AVGWin32:Dropper-BBI [Trj]
Paloaltogeneric.ml

How to remove Backdoor.IRCBot.ACKU?

Backdoor.IRCBot.ACKU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment