Backdoor.SdBot.DFSG information

The Backdoor.SdBot.DFSG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.SdBot.DFSG virus can do?

Injection with CreateRemoteThread in a remote process
Expresses interest in specific running processes
Code injection with CreateRemoteThread in a remote process
Anomalous binary characteristics

How to determine Backdoor.SdBot.DFSG?


File Info:
crc32: 8F6521E4
md5: edd177f6bb277fcca6b4a7c836ba8a70
name: EDD177F6BB277FCCA6B4A7C836BA8A70.mlw
sha1: 581528212f7d11c35516072e71f661ddcb956fca
sha256: 07fa44ff68fd87bc72450c94456a77405d26937d78dcc900bce113d2f25b450f
sha512: ace181fff08a17814782e9f901229a508c5c7c786cf752d1e185d1612391c265cbfe83fc635e04d2ba49e7f306f37d52287f19988e0321615c414a576848aaa7
ssdeep: 384:xhOYa49FYdgaelE9aTY1RWxka2/CkCUBN97Zi92ckLyMKlyPKouOY:xhOYTEep+ETYKOSCg2BLXKEPKo
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Backdoor.SdBot.DFSG also known as:

DrWeb	BackDoor.Chibot.90
Cynet	Malicious (score: 100)
ALYac	Backdoor.SdBot.DFSG
Zillya	Trojan.Pincav.Win32.9838
Alibaba	Trojan:Win32/Pincav.907c11df
Cybereason	malicious.6bb277
Symantec	Backdoor.IRC.Bot
ESET-NOD32	a variant of Generik.KOSPTUV
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Pincav.rzd
BitDefender	Backdoor.SdBot.DFSG
NANO-Antivirus	Trojan.Win32.Chibot.bpgvi
MicroWorld-eScan	Backdoor.SdBot.DFSG
Tencent	Win32.Trojan.Pincav.Apcr
Ad-Aware	Backdoor.SdBot.DFSG
Comodo	Suspicious@#3axkskabcidae
VIPRE	BehavesLike.Win32.Malware.spi (mx-v)
FireEye	Generic.mg.edd177f6bb277fcc
Emsisoft	Backdoor.SdBot.DFSG (B)
Jiangmin	Trojan/Invader.ird
Avira	TR/Hijacker.Gen
eGambit	Generic.Malware
Kingsoft	Win32.Troj.Pincav.(kcloud)
Microsoft	Trojan:Win32/GandCrypt.PVB!MTB
Arcabit	Backdoor.SdBot.DFSG
AegisLab	Trojan.Win32.Pincav.4!c
ZoneAlarm	HEUR:Trojan.Win32.Invader
GData	Backdoor.SdBot.DFSG
TACHYON	Trojan/W32.Pincav.40960.AC
McAfee	Artemis!EDD177F6BB27
MAX	malware (ai score=99)
VBA32	Malware-Cryptor.Inject.gen
Panda	W32/IRCBot.ZW
Rising	Trojan.Pincav!8.252 (CLOUD)
Yandex	Trojan.GenAsa!Tzdu4vVdDvg
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/SDBot.DDO!tr.bdr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Pincav.HgIASOoA

How to remove Backdoor.SdBot.DFSG?

Backdoor.SdBot.DFSG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X