Backdoor

Backdoor.Bladabindi.SFX (file analysis)

Malware Removal

The Backdoor.Bladabindi.SFX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Bladabindi.SFX virus can do?

  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs

How to determine Backdoor.Bladabindi.SFX?


File Info:

crc32: CAB14735
md5: bc9a97d3fa4fe78518563424e9922bdb
name: BC9A97D3FA4FE78518563424E9922BDB.mlw
sha1: 1cfb0d2b29a772f7124c9291ab621bff356ad0f8
sha256: c03005da40fab995feb7ab61994ce2421b206164e8a72192be8f3835cc2a5a3a
sha512: 0fcc0e3a9dcc97fe83b222289ac78920238ab6b2de9c53ee521717591aba6661521bca04f70caf51b4fbded2a9f0d9bb93bf3a0bd62cc5cd30334d21a6524d46
ssdeep: 12288:iQnk3GDYKGcblwtX+t4Y8P9pyhc3EuLfWd1X1TMtLoYZofwFTIaBojiaeDGs1Zd1:2AOcZwXY9hvubO1X1TMJIoL6i1hFh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Backdoor.Bladabindi.SFX also known as:

K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.MSIL.NanoBot.m!c
CAT-QuickHealBackdoor.MSIL
ALYacTrojan.Generic.31126038
CylanceUnsafe
SangforBackdoor.MSIL.NanoBot.bevm
AlibabaBackdoor:MSIL/NanoBot.f261b6ea
K7GWRiskware ( 0040eff71 )
CyrenW32/S-536dd2d1!Eldorado
APEXMalicious
AvastWin32:DangerousSig [Trj]
KasperskyBackdoor.MSIL.NanoBot.bevm
BitDefenderTrojan.Generic.31126038
MicroWorld-eScanTrojan.Generic.31126038
Ad-AwareTrojan.Generic.31126038
SophosMal/Generic-S
ComodoMalware@#8ep8r94pl3hn
TrendMicroTROJ_FRS.VSNTJV21
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.Generic.31126038
EmsisoftTrojan.Generic.31126038 (B)
KingsoftWin32.Hack.MSIL.be.(kcloud)
MicrosoftTrojan:Win32/Woreflint.A!cl
ArcabitTrojan.Generic.D1DAF216
ZoneAlarmBackdoor.MSIL.NanoBot.bevm
GDataTrojan.Generic.31126038
McAfeeArtemis!BC9A97D3FA4F
MAXmalware (ai score=83)
VBA32Backdoor.MSIL.NanoBot
MalwarebytesBackdoor.Bladabindi.SFX
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_FRS.VSNTJV21
MaxSecureWin.MxResIcn.Heur.Gen
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml

How to remove Backdoor.Bladabindi.SFX?

Backdoor.Bladabindi.SFX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment