Backdoor:Win32/Death.1_8 (file analysis)

The Backdoor:Win32/Death.1_8 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/Death.1_8 virus can do?

Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Backdoor:Win32/Death.1_8?


File Info:
crc32: 68DD22A3
md5: 5fb237e3dde4e5dccdc78472fe7dcdc5
name: 5FB237E3DDE4E5DCCDC78472FE7DCDC5.mlw
sha1: fa36542f7e388470a4dff5a979a62037ec39aaff
sha256: d08b5baafeb4518261365a6749462441eaa3b0347254f52baa4432a89268f0ea
sha512: 523027ee926c7cbf760de6c21b1b37efcad012bfa9ddc9856fbc094918bd46fad3c5979b746a10269720d513152bd52a20a41e6da02f043e06ce1a3a5b868262
ssdeep: 3072:9gvdANR92GP5zgVLT+AMc1TjsUCJDzdO2MZz9IlU+otdmGWMpox093j5Ey:9g1sCGCB+Tc1nfrlulyfpk09z5E
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 1.6.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: 
Translation: 0x0419 0x04e3

Backdoor:Win32/Death.1_8 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 7000000f1 )
DrWeb	BackDoor.Death.18
ALYac	Generic.Malware.SFMb6g.34E81341
Zillya	Backdoor.Death.Win32.7
Sangfor	Trojan.Win32.SFMboeg.34E81341
Alibaba	Backdoor:Win32/Death.9a677f9f
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.3dde4e
Cyren	W32/Risk.SEXZ-6789
Symantec	Backdoor.Death
ESET-NOD32	Win32/Death.18
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Death.18
BitDefender	Generic.Malware.SFMb6g.34E81341
NANO-Antivirus	Trojan.Win32.Death.hfgv
ViRobot	Backdoor.Win32.Death.228352
MicroWorld-eScan	Generic.Malware.SFMb6g.34E81341
Tencent	Win32.Backdoor.Death.Tape
Ad-Aware	Generic.Malware.SFMb6g.34E81341
Sophos	Mal/Generic-R + Troj/Bdoor-FP
Comodo	Backdoor.Win32.Death.18@26jg
BitDefenderTheta	Gen:NN.ZelphiF.34690.nO0baOfbtomc
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_DEATH
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
FireEye	Generic.Malware.SFMb6g.34E81341
Emsisoft	Generic.Malware.SFMb6g.34E81341 (B)
Jiangmin	Backdoor/Death.be
Webroot	W32.Backdoor.Gen
Avira	BDS/Death.18
Kingsoft	Win32.Hack.Death.18.(kcloud)
Microsoft	Backdoor:Win32/Death.1_8
ZoneAlarm	Backdoor.Win32.Death.18
GData	Generic.Malware.SFMb6g.34E81341
TACHYON	Backdoor/W32.Death.228352
AhnLab-V3	Trojan/Win32.Roxrat.R92333
McAfee	BackDoor-FP
MAX	malware (ai score=100)
VBA32	BScope.Backdoor.Autokill
Panda	Bck/Death.18
TrendMicro-HouseCall	TROJ_DEATH
Rising	Backdoor.Death.18 (CLOUD)
Yandex	Trojan.GenAsa!4RKjCZWlbOk
Ikarus	Trojan.Win32.Death
eGambit	Generic.Malware
Fortinet	W32/Bdoor.FP!tr.bdr
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Backdoor:Win32/Death.1_8?

Backdoor:Win32/Death.1_8 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X