Categories: Malware

Generic.Sdbot.A5A050AA removal

The Generic.Sdbot.A5A050AA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Sdbot.A5A050AA virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Creates a copy of itself

How to determine Generic.Sdbot.A5A050AA?


File Info:
name: D6EB4D28A6AF3658E9B9.mlwpath: /opt/CAPEv2/storage/binaries/8e85dde2bdbf593a650970960384a1f6c44e3a27a8a3c683c8ceb1fce30ede62crc32: 565F267Cmd5: d6eb4d28a6af3658e9b9520c43e855fesha1: 0a081fed68c82262ef014c4141c79e4f21de160dsha256: 8e85dde2bdbf593a650970960384a1f6c44e3a27a8a3c683c8ceb1fce30ede62sha512: a73222c03d4bbf5cf8ce289dc0d46121503e6a85589095cf2505bf76b303b4b934f696644e2607331c17f06162e10dd27e3d269a5e3a11cd6c6559b10b0548f3ssdeep: 1536:rmTzgogQ15AvcQJOw6eMeoFuuiLpPtiSaDmzynouy8:rmT8/Q1ivcQJOw6eCFuRPrGouttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11A53F19FF96763CCC5FC5076046EB548D87A842E4AA40626DFE03473DE82F781E5D24Asha3_384: 90fe072f879b05bad875ff2e705db303e205a2d04c91d6f001db2a50be367c433d5c993f693564ff9a2b5eedd00c9976ep_bytes: 60be006045008dbe00b0faff5789e58dtimestamp: 2004-04-13 00:55:31
Version Info:
0: [No Data]

Generic.Sdbot.A5A050AA also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.SdBot.m!c
MicroWorld-eScan	Generic.Sdbot.A5A050AA
ClamAV	Win.Trojan.Trojan-427
FireEye	Generic.mg.d6eb4d28a6af3658
ALYac	Generic.Sdbot.A5A050AA
Cylance	Unsafe
VIPRE	Generic.Sdbot.A5A050AA
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Bloop.A.gen!Eldorado
Symantec	W32.IRCBot.Gen
Elastic	malicious (moderate confidence)
ESET-NOD32	IRC/SdBot.AZH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.SdBot.apf
BitDefender	Generic.Sdbot.A5A050AA
NANO-Antivirus	Trojan.Win32.SdBot.deoces
SUPERAntiSpyware	Trojan.Agent/Gen-RBot
Avast	FileRepMalware [Trj]
Tencent	Backdoor.Win32.Sdbot.apfa
Ad-Aware	Generic.Sdbot.A5A050AA
Emsisoft	Generic.Sdbot.A5A050AA (B)
Comodo	Backdoor.Win32.Rbot.~gen@1xtqdu
DrWeb	BackDoor.IRC.Sdbot.based
Zillya	Backdoor.SdBot.Win32.14224
TrendMicro	WORM_SDBOT.GEN-1
McAfee-GW-Edition	BehavesLike.Win32.Generic.kc
Trapmine	malicious.high.ml.score
Sophos	W32/Sdbot-HU
Ikarus	Backdoor.Win32.SdBot
GData	Generic.Sdbot.A5A050AA
Jiangmin	Backdoor/SdBot.Gen.b
Avira	BDS/Backdoor.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.3C
ZoneAlarm	Backdoor.Win32.SdBot.apf
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Worm/Win32.IRCBot.R24719
Acronis	suspicious
McAfee	Artemis!D6EB4D28A6AF
MAX	malware (ai score=87)
VBA32	BScope.Backdoor.Win32.SdBot
Malwarebytes	Malware.Heuristic.1003
TrendMicro-HouseCall	WORM_SDBOT.GEN-1
Rising	Backdoor.Rbot!1.662E (CLOUD)
Yandex	Trojan.GenAsa!jk6eAYOl30A
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/SDBot.SIY!tr.bdr
BitDefenderTheta	AI:Packer.1DB45C521E
AVG	FileRepMalware [Trj]
Cybereason	malicious.8a6af3
Panda	W32/Sdbot.gen.worm