What is “Dropped:Backdoor.Bot.117885”?

The Dropped:Backdoor.Bot.117885 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Dropped:Backdoor.Bot.117885 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.

How to determine Dropped:Backdoor.Bot.117885?


File Info:
crc32: 8DB96A4B
md5: 4eaf5a9d67f84ab777bbd9630091988c
name: 4EAF5A9D67F84AB777BBD9630091988C.mlw
sha1: 6947200a8a13996685da1e86c8c1851e0e8699a7
sha256: 9634e6b28bdea9069485889d1e5ec6c58ebd75b1cc1e9fd4e8fa26391b2950e4
sha512: c80a13a4d954cde0c48a1af88024f37be641e0df3c7faf8c33cc96bbf66ff9509d4a6da946bf9fab2e2adc67493dfaf4dc231e4aca026f15fbea8b53178869da
ssdeep: 6144:m/0uo3Oh00QUAaXMiCfI4xKZaGZmiWA3CyQMEkdgNCBhHU7ojH4AEtfw1isEhe:mJIO/Hvlg3IuiWA3euMCBNU7o0AENKj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C)360.cn Inc.All Rights Reserved.
InternalName: 360sd
FileVersion: 1, 1, 0, 1093
CompanyName: 360.cn
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: 360x6740x6bd2
SpecialBuild: 
ProductVersion: 1, 1, 0, 1093
FileDescription: 360x6740x6bd2x4e3bx7a0bx5e8f
OriginalFilename: 360sd.EXE
Translation: 0x0804 0x04b0

Dropped:Backdoor.Bot.117885 also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.Pigeon.21851
Cynet	Malicious (score: 100)
ALYac	Dropped:Backdoor.Bot.117885
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
Cybereason	malicious.d67f84
Cyren	W32/Hupigon.KTMK-1187
APEX	Malicious
Avast	Win32:GenMalicious-BND [Trj]
ClamAV	Win.Trojan.WoW-458
BitDefender	Dropped:Backdoor.Bot.117885
MicroWorld-eScan	Dropped:Backdoor.Bot.117885
Tencent	Win32.Trojan.Dropper.Pgxj
Ad-Aware	Dropped:Backdoor.Bot.117885
Sophos	Generic ML PUA (PUA)
Comodo	Heur.Corrupt.PE@1z141z3
F-Secure	Backdoor.BDS/Hupigon.Gen
VIPRE	Backdoor.Win32.Hupigon (v)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.fc
FireEye	Generic.mg.4eaf5a9d67f84ab7
Emsisoft	Dropped:Backdoor.Bot.117885 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Backdoor/Huigezi.aamp
Webroot	W32.Malware.Gen
Avira	BDS/Hupigon.Gen
eGambit	Unsafe.AI_Score_95%
Antiy-AVL	Trojan/Generic.ASMalwFH.55AB27F
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Backdoor.Bot.D1CC7D
GData	Dropped:Backdoor.Bot.117885
McAfee	Artemis!4EAF5A9D67F8
MAX	malware (ai score=89)
VBA32	Backdoor.Pigeon
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.85 (RDML:xBn/UvAIIzL013+Q1d+57A)
Yandex	Trojan.GenAsa!HDCqO08MXNo
AVG	Win32:GenMalicious-BND [Trj]

How to remove Dropped:Backdoor.Bot.117885?

Dropped:Backdoor.Bot.117885 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X