Categories: Malware

Generic.Sdbot.36788A5F removal instruction

The Generic.Sdbot.36788A5F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Sdbot.36788A5F virus can do?

Uses Windows utilities for basic functionality
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Creates a copy of itself
Deletes executed files from disk

How to determine Generic.Sdbot.36788A5F?


File Info:
name: 499D8AF71FB064C04120.mlwpath: /opt/CAPEv2/storage/binaries/0d98db1358914918679a2b97fe09bf7d85aa3ba4d2bffb5847e55bd0d5b01fe7crc32: FF62DD52md5: 499d8af71fb064c04120e37ae02d0ffdsha1: 5c695507e77148122fc5fe5a61eff35ffe01b8c8sha256: 0d98db1358914918679a2b97fe09bf7d85aa3ba4d2bffb5847e55bd0d5b01fe7sha512: 7637c9af23c9786b5731dc6c66c528e57e017a27742f640d9c94151f6dfdeb371d45f72d166c55950e3c2046d325b6c1f564ea90b8c68a144edd0c0eea2f3cb6ssdeep: 3072:tUO18V14ZgVGIwEyjMyTJ/Oi4us015lIrPo3BJzn5o14Zuout:tUpV0EyjbGi4ubvv7C19oStype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F5D31358F017BA2EC2F2C8773D8366737431992FE845F5A2DD54387368D5A0A2E744E8sha3_384: 68dcf13d4aaeb83d39a41411c9f917f6126482214254bbe6701c178890af4967aa299c6ba9cc5a9f064218ebf66ede2bep_bytes: eb425d8d7d0c8b6d008b77f88b5ffc31timestamp: 2011-08-18 18:11:08
Version Info:
0: [No Data]

Generic.Sdbot.36788A5F also known as:

Bkav	W32.AIDetectMalware
Lionic	Hacktool.Win32.Klone.3!c
MicroWorld-eScan	DeepScan:Generic.Sdbot.36788A5F
Skyhigh	BehavesLike.Win32.Generic.cc
McAfee	Generic.atg-FAGT!499D8AF71FB0
VIPRE	DeepScan:Generic.Sdbot.36788A5F
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0032c9421 )
BitDefender	DeepScan:Generic.Sdbot.36788A5F
K7GW	Trojan ( 0032c9421 )
Cybereason	malicious.7e7714
Baidu	Win32.Trojan.Kryptik.bh
Symantec	W32.IRCBot
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/IRCBot.ARA
APEX	Malicious
ClamAV	Win.Trojan.Crypt-329
Kaspersky	Packed.Win32.Klone.bz
Alibaba	Trojan:Win32/Klone.066811ea
NANO-Antivirus	Trojan.Win32.ModUpx.eksvbz
ViRobot	Trojan.Win32.Klone.Gen.A
Rising	Trojan.IRCBot!8.588 (TFE:2:ANIYiYxlq2K)
Sophos	Troj/Agent-MWZ
F-Secure	Trojan.TR/Crypt.ULPM.Gen
DrWeb	BackDoor.IRC.Rxbot.64
Zillya	Backdoor.IRCBot.Win32.15291
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.499d8af71fb064c0
Emsisoft	DeepScan:Generic.Sdbot.36788A5F (B)
Ikarus	Backdoor.Win32.Rbot
Webroot	W32.Bot.Gen
Google	Detected
Avira	TR/Crypt.ULPM.Gen
Varist	W32/Agent.ML.gen!Eldorado
Antiy-AVL	Trojan[Packed]/Win32.Klone.bz
Kingsoft	malware.kb.a.992
Microsoft	Backdoor:Win32/Rbot.gen
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	DeepScan:Generic.Sdbot.36788A5F
ZoneAlarm	Packed.Win32.Klone.bz
GData	DeepScan:Generic.Sdbot.36788A5F
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Rbot.R12169
BitDefenderTheta	AI:Packer.1F7228F31E
ALYac	DeepScan:Generic.Sdbot.36788A5F
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
VBA32	SScope.Backdoor.Sdbot
Cylance	unsafe
Panda	Trj/Genetic.gen
Yandex	Trojan.IRCBot!rYtEy23d4KY
SentinelOne	Static AI – Malicious PE
MaxSecure	Packed.Klone.bz
Fortinet	W32/IRCBot.NER!tr.bdr
AVG	Win32:Rbot-GQO [Trj]
Avast	Win32:Rbot-GQO [Trj]
CrowdStrike	win/malicious_confidence_90% (W)