About “Backdoor.Ircbotn” infection

The Backdoor.Ircbotn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.Ircbotn virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Backdoor.Ircbotn?


File Info:
name: 0717324BC858C565B01A.mlw
path: /opt/CAPEv2/storage/binaries/622bee33ccbd897bc4defd751db6fc313a27d1874c29a689898d51937963f311
crc32: CE1D9BE6
md5: 0717324bc858c565b01af5a11a757915
sha1: aa3e8634d1700a120201022256abbb49f19ec088
sha256: 622bee33ccbd897bc4defd751db6fc313a27d1874c29a689898d51937963f311
sha512: 7c4c3cd9f20bed5506475617386c5a05153a419d52bd22d1d8e1cd38a010928e7bc579e5f6d981de7740f7a0b0cbc0312350bf34154640011f18718e923b5b74
ssdeep: 3072:Cm4MwWYm3434iFrmsA7uCEeiUhNK3v+2rR3mpm/UX:isd7uCEeiUhNK3v+2rR3K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T107C3F831F753A022CD72153CA75993FD8DEDDA332604846B97CCCA262DB4BA5DF22606
sha3_384: f11fcb86c25f9d205005aa331d63c417a22d14adbe5e914668493c974801e70ae39eac385dc1b83143c261bd757249ad
ep_bytes: ffff0000ff75e8e8b41800006a108d45
timestamp: 2006-12-11 14:26:14

Version Info:
0: [No Data]

Backdoor.Ircbotn also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Generic.Dacic.4254EF66.A.528B662D
ClamAV	Win.Malware.Sfwx-9853337-0
FireEye	Generic.mg.0717324bc858c565
CAT-QuickHeal	Backdoor.Ircbotn
McAfee	Exploit-DcomRpc.c.gen
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Agent.FZA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Generic.Dacic.4254EF66.A.528B662D
Avast	Win32:Allaple-D [Trj]
Emsisoft	Generic.Dacic.4254EF66.A.528B662D (B)
Baidu	Win32.Worm.Rbot.a
VIPRE	Generic.Dacic.4254EF66.A.528B662D
TrendMicro	TROJ_GEN.R03BC0DIE23
McAfee-GW-Edition	BehavesLike.Win32.ExploitDcomRpc.cm
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Generic.Dacic.4254EF66.A.528B662D
MAX	malware (ai score=81)
Antiy-AVL	HackTool/Win32.Agent.a
Arcabit	Generic.Dacic.4254EF66.A.528B662D
Microsoft	Backdoor:Win32/IRCbot.gen!N
Google	Detected
AhnLab-V3	Worm/Win32.Allaple.R25156
ALYac	Generic.Dacic.4254EF66.A.528B662D
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R03BC0DIE23
Rising	Trojan.Generic@AI.100 (RDML:QlCaVBICBLiEL6m5hRyFzQ)
Ikarus	Backdoor.Win32.Allaple
MaxSecure	Trojan.Malware.321012.susgen
Fortinet	W32/Generic.AC.1A4F05!tr
AVG	Win32:Allaple-D [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Backdoor.Ircbotn?

Backdoor.Ircbotn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X