Should I remove “BAT/SystemMod.K potentially unsafe”?

The BAT/SystemMod.K potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BAT/SystemMod.K potentially unsafe virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine BAT/SystemMod.K potentially unsafe?


File Info:
name: DFCEC99B8750651F5285.mlw
path: /opt/CAPEv2/storage/binaries/39ebd8e6ff71208fa9dcf5e25102bdde31a75cd1134062738cc5f2d57afcf8d9
crc32: 76F7177A
md5: dfcec99b8750651f528524b6f777c4b4
sha1: 426c6ca2a4d2444d65c27ff8c81f2c4b104e7703
sha256: 39ebd8e6ff71208fa9dcf5e25102bdde31a75cd1134062738cc5f2d57afcf8d9
sha512: ce48f00d3cb295c6ca08c58e1754c99fb506207332694e1f44f0d485177cf50badd90ab81f80e643679a16e200d7709a5eb759cb81d4336baf0e5c60faa6f44a
ssdeep: 6144:kBlkZvaF4NTBZqKLlSq2UeoiFEkulKxXQXIAPONFm0elNSTsvxWuHn:koSWNT/qON2UelRulKVoIAGNE0ucAW6
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14354F145F3E241F7EAF2053104B5A13ED335672C57209CF7C34C2D52A942AD5AA3E2EA
sha3_384: 8279c79a20d0e4399302d5218909709bd5d65e798881aa405138fe9c2f99f5a1c3205ccb8f8224714937f81a97e02ff6
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2019-07-30 08:52:45

Version Info:
0: [No Data]

BAT/SystemMod.K potentially unsafe also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Skyhigh	BehavesLike.Win32.RealProtect.dc
McAfee	RDN/Generic.dx
Cylance	unsafe
Sangfor	Ransom.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	Gen:NN.ZexaF.36680.ruW@a0f0Ajl
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	BAT/SystemMod.K potentially unsafe
ClamAV	Win.Trojan.Generic-10011119-0
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.BAT.Deltree
Google	Detected
Kingsoft	malware.kb.a.890
Malwarebytes	Generic.Malware/Suspicious
Rising	Trojan.Generic@AI.96 (RDML:a5Q3HtuVGorS6zl8MSrDMA)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat.PALLAS.M
Cybereason	malicious.2a4d24
DeepInstinct	MALICIOUS

How to remove BAT/SystemMod.K potentially unsafe?

BAT/SystemMod.K potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X