What is “Backdoor:Win32/Rbot!F”?

The Backdoor:Win32/Rbot!F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Rbot!F virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Creates a copy of itself
• Yara detections observed in process dumps, payloads or dropped files

How to determine Backdoor:Win32/Rbot!F?

File Info:
name: 9F1496D1DF1937688D3A.mlw
path: /opt/CAPEv2/storage/binaries/cbb3a03a39b47074540cc37ec4109b5e009d5c8e6dafcea0c6ed6672f1135809
crc32: 32400C9D
md5: 9f1496d1df1937688d3a1ad4b57493c7
sha1: bc03e443e00061ecdedd15cccc4677744d9da911
sha256: cbb3a03a39b47074540cc37ec4109b5e009d5c8e6dafcea0c6ed6672f1135809
sha512: 712632d59991f796cacae1ededa129a8176b85a0d5fd63d4d4fcbafae0ff442ca60e6a78c4439186633f074e06b94ed4a28234c3f567bf81ba17fd1702f69cb4
ssdeep: 3072:ZreHa9jd/e5boBP18Fajcpog2Wo9YrQQLgRU6Pu6tmxTTfso4tQ3X:RR/eKBP18FuYHOdAybuMmxyO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T110C312F0F62C9172E2D05C7958DD843885EBFD5AD251D603E8341FA6B848353FC46DAA
sha3_384: 9896471966573893f768c7799f50fc77e604ada42d68c79143d7bd83bed8ae20e91f8b3f7c5e24bf848aa9741894f280
ep_bytes: b824cd4f005064ff3500000000648925
timestamp: 2007-06-05 13:57:45

Version Info:
0: [No Data]

Backdoor:Win32/Rbot!F also known as:

How to remove Backdoor:Win32/Rbot!F?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.