Categories: Backdoor

How to remove “Backdoor:Linux/DemonBot.Aa!MTB”?

The Backdoor:Linux/DemonBot.Aa!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Linux/DemonBot.Aa!MTB virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Harvests information related to installed mail clients

How to determine Backdoor:Linux/DemonBot.Aa!MTB?


File Info:
crc32: B1D4BAACmd5: 2e80297ee95a2c0dc7302679297cb1a4name: upload_filesha1: dd56e68d0a6116b076d7c34871c29448a1d717e8sha256: 2a0278a4793b12b4044de25316e074fe1136015df84675e28007ac3ab9f07807sha512: ada99a30d0ed1ea10bddef64b56236f80fa9971d4632766c6739196ef4d3b6be396c8de4f0488ddb2d1877707e2f01c405c3e78d948ed96c2b65954178ee6407ssdeep: 1536:XBJ2MNM5oqtkUtnKphaK6igkvmQmF6OXj6ufeuTe:KMN8vYphaK62vmQmF6OXGufhTetype: ELF 32-bit MSB  executable, SPARC version 1 (SYSV), statically linked, not stripped
Version Info:
0: [No Data]

Backdoor:Linux/DemonBot.Aa!MTB also known as:

MicroWorld-eScan	Gen:Variant.Trojan.Linux.Gafgyt.9
FireEye	Gen:Variant.Trojan.Linux.Gafgyt.9
McAfee	Lnx/Gafgyt!2E80297EE95A
Sangfor	Malware
TrendMicro	Backdoor.Linux.GAFGYT.SMMR2
TrendMicro-HouseCall	Backdoor.Linux.GAFGYT.SMMR2
Avast	ELF:Gafgyt-KR [Trj]
ClamAV	Unix.Dropper.Mirai-7138855-0
Kaspersky	HEUR:Backdoor.Linux.Gafgyt.bj
BitDefender	Gen:Variant.Trojan.Linux.Gafgyt.9
Rising	Trojan.Gafgyt/Linux!1.C997 (CLASSIC)
Ad-Aware	Gen:Variant.Trojan.Linux.Gafgyt.9
Sophos	Linux/DDoS-BI
DrWeb	Linux.BackDoor.Fgt.1445
Invincea	Linux/DDoS-BI
McAfee-GW-Edition	Lnx/Gafgyt!2E80297EE95A
Emsisoft	Gen:Variant.Trojan.Linux.Gafgyt.9 (B)
Ikarus	Trojan.Linux.Gafgyt
GData	Gen:Variant.Trojan.Linux.Gafgyt.9
Jiangmin	Backdoor.Linux.eqtl
Antiy-AVL	Trojan[Backdoor]/Linux.Gafgyt.bj
Microsoft	Backdoor:Linux/DemonBot.Aa!MTB
Arcabit	Trojan.Trojan.Linux.Gafgyt.9
ZoneAlarm	HEUR:Backdoor.Linux.Gafgyt.bj
Avast-Mobile	ELF:Gafgyt-KS [Trj]
ALYac	Gen:Variant.Trojan.Linux.Gafgyt.9
ESET-NOD32	a variant of Linux/Gafgyt.AXJ
MAX	malware (ai score=80)
Fortinet	ELF/Gafgyt.ARN!tr
BitDefenderTheta	Gen:NN.Mirai.34254
AVG	ELF:Gafgyt-KR [Trj]