Backdoor:Win32/DeathBot removal

The Backdoor:Win32/DeathBot is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/DeathBot virus can do?

Executable code extraction
Anomalous binary characteristics

How to determine Backdoor:Win32/DeathBot?


File Info:
crc32: 930B5552
md5: 103d1c12ae4d54b74aca673a2a48f596
name: 103D1C12AE4D54B74ACA673A2A48F596.mlw
sha1: b9e31fa9576fd5612ea38503098c7e026df6dfc5
sha256: 90298da65e6df3fb55eb5912c42d99c63a7d6bdd31c3254ee66f81e8bb35b7d5
sha512: ed440af3738ec4c400f8d51204c5e16372b8007c954a10b18bd29885fb5c3889af904efcf03fa310454d37282b83cda46ece62eabd6266255ebf43fcaae4255b
ssdeep: 3072:DvQe6z4ijdykkguqsOdHm3Jw0MaO7T+PTD+OVMBLWiFscHxiUz3v:xT+ykkguj3Jw0MaO7T+PTD+OVMBLWi2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Copyright 2000 Master xa9
InternalName: DeathBot
FileVersion: 9.02
CompanyName: B0T Master
LegalTrademarks: Mxe4xa7x2020xe9r
ProductName: Master_B0T
ProductVersion: 9.02
OriginalFilename: DeathBot.exe

Backdoor:Win32/DeathBot also known as:

K7AntiVirus	Trojan ( 00000cb11 )
DrWeb	BackDoor.Deathbot
Cynet	Malicious (score: 85)
ALYac	Backdoor.DeathBot
Cylance	Unsafe
Zillya	Backdoor.DeathBot.Win32.3
Sangfor	Backdoor.Win32.DeathBot.ky
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:Win32/DeathBot.74f723d0
K7GW	Trojan ( 00000cb11 )
Cybereason	malicious.2ae4d5
Cyren	W32/Risk.RWHE-5960
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/DeathBot
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Deathbot-1
Kaspersky	Backdoor.Win32.DeathBot
BitDefender	Backdoor.DeathBot
NANO-Antivirus	Trojan.Win32.DeathBot.deda
ViRobot	Backdoor.Win32.DeathBot.135168
MicroWorld-eScan	Backdoor.DeathBot
Tencent	Win32.Backdoor.Deathbot.Ducr
Ad-Aware	Backdoor.DeathBot
Sophos	Mal/Generic-R + Troj/Bckdr-FKJ
Comodo	Backdoor@#37r1l4diqnw2z
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	BKDR_DEATHBOT.A
McAfee-GW-Edition	Generic.b
FireEye	Backdoor.DeathBot
Emsisoft	Backdoor.DeathBot (B)
Webroot	W32.Backdoor.Gen
Avira	BDS/DeathBot.1
Kingsoft	Win32.Hack.DeathBot.v.(kcloud)
Microsoft	Backdoor:Win32/DeathBot
Arcabit	Backdoor.DeathBot
AegisLab	Trojan.Win32.DeathBot.m!c
GData	Backdoor.DeathBot
McAfee	Generic.b
MAX	malware (ai score=100)
VBA32	Backdoor.DeathBot
Panda	Bck/Deathbot
TrendMicro-HouseCall	BKDR_DEATHBOT.A
Rising	Backdoor.DeathBot.a (CLOUD)
Ikarus	Trojan.Win32.DeathBot
Fortinet	W32/Deathbot.A!tr.bdr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.Generic.HwMA3PkA

How to remove Backdoor:Win32/DeathBot?

Backdoor:Win32/DeathBot removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X