Backdoor

About “Backdoor:Win32/Death.K” infection

Malware Removal

The Backdoor:Win32/Death.K is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:Win32/Death.K virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Backdoor:Win32/Death.K?


File Info:

crc32: B8140A74
md5: 469e483f054340732b4d9491c298c9e9
name: 469E483F054340732B4D9491C298C9E9.mlw
sha1: 3cca807c566ae61afdb712988553946790356b57
sha256: 1abf42fb1bcc8a5193979f2781491004803bb746183be606293e1774312ebac0
sha512: 37e86a7296b63c814e352f5fd47d53201afea49976a0011a7916a1e5417ba0d340baee498dcb92aa5478651b118bc46d93e3c31306f9c383aed3162dd42a2dcd
ssdeep: 384:ylQJiqYZcBvwt6O/UWVo02tN3Iyz0Bf+LE92wJTRO4F04RoAYI4p:ylHq2cB86lWV1Opz0Bf+LE92wJTtF04s
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Backdoor:Win32/Death.K also known as:

K7AntiVirusTrojan ( 7000000f1 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop.315
CynetMalicious (score: 100)
CMCGeneric.Win32.469e483f05!MD
ALYacGen:Trojan.Heur.bmIfrLVsvpdcP
CylanceUnsafe
ZillyaBackdoor.Death.Win32.88
AlibabaBackdoor:Win32/Death.06749270
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.f05434
CyrenW32/Death.NRDO-7896
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Death.25.K
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Trojan.Death-9835390-0
KasperskyBackdoor.Win32.Death.25.k
BitDefenderGen:Trojan.Heur.bmIfrLVsvpdcP
NANO-AntivirusTrojan.Win32.Death.iuozwj
MicroWorld-eScanGen:Trojan.Heur.bmIfrLVsvpdcP
TencentMalware.Win32.Gencirc.114cda41
Ad-AwareGen:Trojan.Heur.bmIfrLVsvpdcP
SophosML/PE-A + Troj/Death-25
ComodoBackdoor.Win32.Death.25.K@3835
BitDefenderThetaAI:Packer.0752C60E1D
VIPRETrojan.Win32.Generic.pak!cobra
McAfee-GW-EditionBackDoor-FP.dr
FireEyeGeneric.mg.469e483f05434073
EmsisoftGen:Trojan.Heur.bmIfrLVsvpdcP (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor/Death.25.k
WebrootW32.Backdoor.Win32.Death.25.Gen
AviraBDS/Death.25.K.3
eGambitUnsafe.AI_Score_90%
Antiy-AVLTrojan/Generic.ASMalwS.7E2A
MicrosoftBackdoor:Win32/Death.K
ArcabitTrojan.Heur.bmIfrLVsvpdcP
GDataGen:Trojan.Heur.bmIfrLVsvpdcP
McAfeeBackDoor-FP.dr
MAXmalware (ai score=100)
VBA32Backdoor.Death
PandaGeneric Malware
RisingTrojan.Death.25.k (CLASSIC)
YandexTrojan.GenAsa!k0L1tOXToWg
IkarusBackdoor.Win32.Amitis
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Death_25.K!tr.bdr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Backdoor:Win32/Death.K?

Backdoor:Win32/Death.K removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment