Backdoor

What is “Backdoor:Win32/Death.B”?

Malware Removal

The Backdoor:Win32/Death.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:Win32/Death.B virus can do?

  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Backdoor:Win32/Death.B?


File Info:

crc32: ABEA2AA5
md5: 080d461b8723b5d5cb306e93f5bc83e2
name: 080D461B8723B5D5CB306E93F5BC83E2.mlw
sha1: 8f93c0bdc68159e0eb0a15905cd74ff8b8cc3f39
sha256: 7a72f23ee540d75ac6f23c5b55bc2cdd251bb0c13952a3a39696c20e26279cb5
sha512: c606f01e52a9b34b687df53dd8216a5db35bd3758fe00fd75a852746e66b0b5ca416e9249a7755d6fb8ab37ef652a71962ac0eb7411c0c482b090b1a08fc9837
ssdeep: 6144:1iGvi5DfI8jHleFHPoA79fCLfcZ4oeSdMhkJa3dq5:a5TI4siAWfg4jaJod8
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright:
InternalName:
FileVersion: 1.6.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename:
Translation: 0x0419 0x04e3

Backdoor:Win32/Death.B also known as:

MicroWorld-eScanGeneric.Malware.SFMb6g.8FA6C40F
FireEyeGeneric.Malware.SFMb6g.8FA6C40F
ALYacGeneric.Malware.SFMb6g.8FA6C40F
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Dearh.21B
K7AntiVirusTrojan ( 7000000f1 )
BitDefenderGeneric.Malware.SFMb6g.8FA6C40F
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.b8723b
BitDefenderThetaAI:Packer.17995EC719
CyrenW32/Death.BWLQ-6665
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Death.21.B
APEXMalicious
AvastWin32:Trojan-gen
KasperskyBackdoor.Win32.Death.21.b
AlibabaBackdoor:Win32/Death.66b3c8f4
NANO-AntivirusTrojan.Win32.Death.gyza
ViRobotBackdoor.Win32.Death_21.Svr.B
RisingBackdoor.Death.mju (CLOUD)
Ad-AwareGeneric.Malware.SFMb6g.8FA6C40F
SophosMal/Generic-R + Troj/Death-2.1B
ComodoBackdoor.Win32.Death.21.B@2xx3
F-SecureTrojan.TR/Dearh.21B.Srv1
DrWebBackDoor.Death.21
ZillyaBackdoor.Death.Win32.57
TrendMicroBKDR_DEATH.21
McAfee-GW-EditionBackDoor-FP.c.svr
CMCGeneric.Win32.080d461b87!MD
EmsisoftGeneric.Malware.SFMb6g.8FA6C40F (B)
IkarusBackdoor.Win32.Death
MaxSecureTrojan.Malware.1603008.susgen
AviraTR/Dearh.21B.Srv1
MAXmalware (ai score=100)
MicrosoftBackdoor:Win32/Death.B
ArcabitGeneric.Malware.SFMb6g.8FA6C40F
AhnLab-V3Trojan/Win32.Death.R152280
ZoneAlarmBackdoor.Win32.Death.21.b
GDataGeneric.Malware.SFMb6g.8FA6C40F
CynetMalicious (score: 100)
McAfeeBackDoor-FP.c.svr
TACHYONBackdoor/W32.DP-Death.556032
VBA32TScope.Trojan.Delf
MalwarebytesMalware.Heuristic.1003
PandaTrj/Genetic.gen
TrendMicro-HouseCallBKDR_DEATH.21
TencentWin32.Backdoor.Death.Dbh
YandexTrojan.GenAsa!ASnyz5D+qLg
SentinelOneStatic AI – Suspicious PE
eGambitGeneric.Backdoor
FortinetW32/Death_2_1B.21!tr.bdr
WebrootW32.Backdoor.Gen
AVGWin32:Trojan-gen
Qihoo-360Win32/Backdoor.Generic.HgIASOYA

How to remove Backdoor:Win32/Death.B?

Backdoor:Win32/Death.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment