Malware

Generic.Sdbot.F20EF103 information

Malware Removal

The Generic.Sdbot.F20EF103 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Sdbot.F20EF103 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Starts servers listening on 0.0.0.0:113
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Deletes its original binary from disk
  • A process attempted to delay the analysis task by a long amount of time.
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Generic.Sdbot.F20EF103?


File Info:

crc32: DDE406B8
md5: 514c95050614b0eb8634382f26df3f3c
name: 514C95050614B0EB8634382F26DF3F3C.mlw
sha1: 232523c1e9b72015dd4de5f3931021ae405d2525
sha256: 7e9d5ba59d8363310f218ab5a31713685cbcaabd11a38c7257dd7402cc8167d5
sha512: 8b7b5711cc4270eed396e8c27fdf585a44251b29672a0d3cdf3f54755f7b553db34dd32df07cfd73dfbf803e53db5104ba694d41f510880443e8fa3816c63690
ssdeep: 3072:s+vWDKBm3eJ6j/eUqXGYkBcJMRi5zoCIHN7:5+eEbe/WJReEh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Sdbot.F20EF103 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebWin32.HLLW.MyBot.based
CynetMalicious (score: 100)
ALYacGeneric.Sdbot.F20EF103
CylanceUnsafe
ZillyaBackdoor.Rbot.Win32.2
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
Cybereasonmalicious.50614b
CyrenW32/Risk.HDEY-0662
ESET-NOD32Win32/RBot.BTM
APEXMalicious
TotalDefenseWin32/Rbot.AKN
AvastWin32:Malware-gen
ClamAVWin.Trojan.Mybot-4352
KasperskyBackdoor.Win32.Rbot.gen
BitDefenderGeneric.Sdbot.F20EF103
NANO-AntivirusTrojan.Win32.Rbot.wjcoc
MicroWorld-eScanGeneric.Sdbot.F20EF103
TencentMalware.Win32.Gencirc.114cd91f
Ad-AwareGeneric.Sdbot.F20EF103
SophosMal/Generic-R + W32/Rbot-KS
ComodoBackdoor@#2v0c0h6kwflmo
BitDefenderThetaAI:Packer.B53F19F91E
VIPRETrojan.Win32.Generic!BT
TrendMicroWORM_SPYBOT.ET
McAfee-GW-EditionBehavesLike.Win32.VirRansom.cc
FireEyeGeneric.mg.514c95050614b0eb
EmsisoftGeneric.Sdbot.F20EF103 (B)
JiangminTrojan/Genome.dist
WebrootW32.Rbot.Gen
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Hack.Rbot.(kcloud)
MicrosoftBackdoor:Win32/Rbot
ArcabitGeneric.Sdbot.F20EF103
GDataGeneric.Sdbot.F20EF103
AhnLab-V3Worm/Win32.IRCBot.C67948
Acronissuspicious
McAfeeW32/Sdbot.v.gen.k
MAXmalware (ai score=84)
VBA32Backdoor.Rbot
PandaW32/Gaobot.gen.worm
TrendMicro-HouseCallWORM_SPYBOT.ET
RisingBackdoor.Rbot!1.6617 (CLOUD)
IkarusTrojan.Win32.VBKrypt
FortinetW32/RBot.gen!tr.bdr
AVGWin32:Malware-gen
Qihoo-360Malware.Radar01.Gen

How to remove Generic.Sdbot.F20EF103?

Generic.Sdbot.F20EF103 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment