Categories: Backdoor

How to remove “Redosdru.Backdoor.Bot.DDS”?

The Redosdru.Backdoor.Bot.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Redosdru.Backdoor.Bot.DDS virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Executable file is packed/obfuscated with ASPack
Authenticode signature is invalid

How to determine Redosdru.Backdoor.Bot.DDS?


File Info:
name: CEFCF8D8478EC63AC38A.mlwpath: /opt/CAPEv2/storage/binaries/ee144517b4581f417cd58ab32f0f82df20fe9ed0a3b287fb52e22e76c3b329e8crc32: D66A5A65md5: cefcf8d8478ec63ac38a54018358fec6sha1: 4703eafd1d511f329e5996558046bb9e63e8d845sha256: ee144517b4581f417cd58ab32f0f82df20fe9ed0a3b287fb52e22e76c3b329e8sha512: 105d8edb7fbe256db46928b299d2a45057fa44a0ffcc377b5db10522f371d40b8bb3a418bb41b774fe1eaa867c91ae28749ccc546edbdb5671b4eee2d6087481ssdeep: 6144:mfVWnnWKqEF5BwyqhPmeYPO0cTBlhHrfndnU:kOWPQfEPjYPO0cT3type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T160149D53EAC180F5D959167480EFB77A66FB5B4407081EC3BB84EEE504E31509A3ADCBsha3_384: d45a04cbbbc92b5ac8fed125784d2da66725331805c08312cd794c3d3ecd2d5fe0d52a2a43d160b1461e082e11472774ep_bytes: 558bec6aff686811400068004b400064timestamp: 2010-07-14 21:49:33
Version Info:
ConpanyName: Microsoft CorporationFileDescription: 360杀毒 主程序FileVersion: 5.2.3790.4021 (srv03_sp2_qfe.070211-2318)                  InternalName: VSSVC.EXELegalCopyright: (C) Microsoft Corporation. All rights reserved.OriginalFilename: VSSVC.EXEProductName: 360杀毒 主程序ProductVersion: 5.2.3790.4021Translation: 0x0804 0x04b0

Redosdru.Backdoor.Bot.DDS also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doina.18368
ClamAV	Win.Trojan.Zegost-9758778-0
FireEye	Generic.mg.cefcf8d8478ec63a
ALYac	Gen:Variant.Doina.18368
Malwarebytes	Redosdru.Backdoor.Bot.DDS
Zillya	Trojan.Bjlog.Win32.4121
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 0016e1f71 )
K7AntiVirus	Trojan ( 0016e1f71 )
BitDefenderTheta	Gen:NN.ZexaF.36318.mm0@a8OlXwbb
VirIT	Trojan.Win32.Generic.UEH
Cyren	W32/Zegost.F.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Redosdru.FP
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-PSW.Win32.Bjlog.dxuu
BitDefender	Gen:Variant.Doina.18368
NANO-Antivirus	Trojan.Win32.Bjlog.ikjxl
Avast	Win32:Zegost-C [Trj]
Emsisoft	Gen:Variant.Doina.18368 (B)
Baidu	Win32.Backdoor.Zegost.b
F-Secure	Backdoor:W32/Bjlog.D
DrWeb	Trojan.Ludo.27
VIPRE	Gen:Variant.Doina.18368
TrendMicro	TROJ_ZEGOST.SME
McAfee-GW-Edition	BehavesLike.Win32.Worm.ch
Trapmine	malicious.high.ml.score
Sophos	Mal/Zegost-C
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan-Dropper.Zegost.E
Jiangmin	Trojan/PSW.Bjlog.cau
Webroot	W32.Trojan.Gen
Avira	TR/Hijacker.Gen
Antiy-AVL	Trojan[PSW]/Win32.Bjlog
Xcitium	Backdoor.Win32.Zegost.B@1qlsm2
Arcabit	Trojan.Doina.D47C0
ZoneAlarm	Trojan-PSW.Win32.Bjlog.dxuu
Microsoft	TrojanDropper:Win32/Zegost.B
Google	Detected
AhnLab-V3	Trojan/Win32.Bjlog.R15323
McAfee	GenericRXCV-AG!CEFCF8D8478E
MAX	malware (ai score=83)
VBA32	TScope.Malware-Cryptor.SB
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_ZEGOST.SME
Rising	Backdoor.Bjlog!1.D1D9 (CLASSIC)
Yandex	Trojan.Zegost.Gen.5
Ikarus	Trojan-PWS.Win32.Bjlog
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Bjlog.LBY!tr.pws
AVG	Win32:Zegost-C [Trj]
DeepInstinct	MALICIOUS