How to remove “Backdoor:Win32/Wabot”?

The Backdoor:Win32/Wabot is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Wabot virus can do?

• The office file contains 2 macros
• The office file contains a macro with auto execution
• The office file contains a macro with suspicious strings

How to determine Backdoor:Win32/Wabot?

File Info:
crc32: DF0F9B0D
md5: fee8c1a550bcdb319b7cac1c45a7547a
name: upload_file
sha1: 0ff9eeefd3d389d8e4b6d5d4b6caff47755b2b64
sha256: 8e3c3e30a1582d6ec6ebd6a35334c4295e46aba8225fdeeb7d019acbc7d69350
sha512: f84378bc3461056d09acba2b5827c65e6016f7c9de54ea034c28164b63de6709fd8709a5cfdc2174afd7197655f0a356b8a969e2795c75c2a50371266f499bbf
ssdeep: 3072:/Msknok2er/yR5DpQKajNDu1CkBwN0pqJfWSI:zkoRoKDpQZqQkmN0scD
type: Microsoft Word 2007+

Version Info:
0: [No Data]

Backdoor:Win32/Wabot also known as:

How to remove Backdoor:Win32/Wabot?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.