Generic.Backdoor.IRCBot.DDS removal instruction

The Generic.Backdoor.IRCBot.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Backdoor.IRCBot.DDS virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Generic.Backdoor.IRCBot.DDS?


File Info:
name: D71728A04A86BBC9B093.mlw
path: /opt/CAPEv2/storage/binaries/30dfc2b070672ed5b6fc37831fc4177bf0fc0c4560bcca733ebc62f021f554b1
crc32: DCA8084E
md5: d71728a04a86bbc9b093c974dd31720c
sha1: 669a0f3b8c92f628d6ac95c7b763170e501f60e3
sha256: 30dfc2b070672ed5b6fc37831fc4177bf0fc0c4560bcca733ebc62f021f554b1
sha512: e0cbb6ba614264a35bcf599212ae0b3011c1c7e8c93a3cf79d4f28b89f3608bed05bef57b1f1e9786c5858720b7d3d188bfa682ba26a79c845422d98d70053a4
ssdeep: 768:FmiOQauOECLIK8u4qc+5aIjK4LrP+K5fE6ry7298P2dUV0:Fmip8JB5aOLL+K5E6L8A
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AE736B53E880D833D0618EFE8D6BE4A9F65F36102F253127779A5FCD993DA820A1C592
sha3_384: b50096ddb7ccb6f7711a51ec497a23447d4053647375d9f79b84e2cbf5a9f930693b74ddb02b9d4054e0652225c67c5e
ep_bytes: 8d45f4ba04000000e873abffff6a008b
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Generic.Backdoor.IRCBot.DDS also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	Gen:Variant.Fugrafa.278453
ClamAV	Win.Trojan.Gobot-20
ALYac	Gen:Variant.Fugrafa.278453
Malwarebytes	Generic.Backdoor.IRCBot.DDS
VIPRE	Gen:Variant.Fugrafa.278453
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Delf_Troj.EL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fugrafa.278453
Avast	Win32:Delf-HW [Trj]
TACHYON	Trojan/W32.Agent.73728.GOC
Emsisoft	Gen:Variant.Fugrafa.278453 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.d71728a04a86bbc9
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE1.QISNP9
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Fugrafa.D43FB5
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	Artemis!D71728A04A86
MAX	malware (ai score=82)
VBA32	suspected of Backdoor.Delf.31
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH09D523
Rising	Backdoor.IRCbot!1.C104 (CLASSIC)
Ikarus	P2P-Worm.Win32.Delf
MaxSecure	Trojan.Malware.204209788.susgen
Fortinet	W32/Agent.GBOT!tr
BitDefenderTheta	Gen:NN.ZelphiF.36132.eGY@aq111Ep
AVG	Win32:Delf-HW [Trj]
DeepInstinct	MALICIOUS

How to remove Generic.Backdoor.IRCBot.DDS?

Generic.Backdoor.IRCBot.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X