Generic.MSIL.Bladabindi.5BC49125 removal

The Generic.MSIL.Bladabindi.5BC49125 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.MSIL.Bladabindi.5BC49125 virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the njRat malware family

How to determine Generic.MSIL.Bladabindi.5BC49125?


File Info:
name: 2A9F29716C61FD138FDB.mlw
path: /opt/CAPEv2/storage/binaries/1bbf97dc139eb8fe3009f3d191f85ffa2a6a6da496b294a492d7aa525ea1cd81
crc32: 499F36BA
md5: 2a9f29716c61fd138fdb0997c4fb99ed
sha1: 2ce3a397c8f7762c7b69a55dfe9152a996ed5cd2
sha256: 1bbf97dc139eb8fe3009f3d191f85ffa2a6a6da496b294a492d7aa525ea1cd81
sha512: 0a776119515c36996390693e18aad79371eebd6809d2be0810935a79e3086daa3623fdd6adcd8acbfa0140a2c1ed01642f7fa4c2d7294e284a566e3a12030f64
ssdeep: 384:fc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZyZU:9e9EJLN/yRpcnuxU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T140B2094E3FB88966C5BC177489B59610037091870422EF2A8CC964DBAFB3BD56D4CBF9
sha3_384: 8b9e9cde7aa0bb63f8490558528e48289bd54bd66c18adacfd925036f3c480ad65a26c11276709ddbb2ff45973fae11f
ep_bytes: ff250020400003101102100106031309
timestamp: 2020-04-01 18:09:41

Version Info:
0: [No Data]

Generic.MSIL.Bladabindi.5BC49125 also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Dropper.njRAT-7436651-0
FireEye	Generic.mg.2a9f29716c61fd13
CAT-QuickHeal	Backdoor.Bladabindi.AJ3
ALYac	Generic.MSIL.Bladabindi.5BC49125
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
K7GW	Trojan ( 700000121 )
Cybereason	malicious.16c61f
Cyren	W32/MSIL_Bladabindi.AU.gen!Eldorado
Symantec	Backdoor.Ratenjay
ESET-NOD32	MSIL/Bladabindi.BC
Baidu	MSIL.Backdoor.Bladabindi.a
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.MSIL.Disfa.bop
BitDefender	Generic.MSIL.Bladabindi.5BC49125
NANO-Antivirus	Trojan.Win32.Disfa.dtznyx
ViRobot	Backdoor.Win32.Bladabindi.Gen.A
MicroWorld-eScan	Generic.MSIL.Bladabindi.5BC49125
Avast	MSIL:Agent-DRD [Trj]
Ad-Aware	Generic.MSIL.Bladabindi.5BC49125
Sophos	ML/PE-A + Troj/Bbindi-W
Comodo	Backdoor.MSIL.Bladabindi.A@566ygc
DrWeb	Trojan.DownLoader11.13729
VIPRE	Backdoor.MSIL.Bladabindi.a (v)
TrendMicro	BKDR_BLADABI.SMC
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mm
Emsisoft	Trojan.Bladabindi (A)
Ikarus	Trojan.MSIL.Bladabindi
GData	MSIL.Backdoor.Bladabindi.AV
Jiangmin	Trojan.MSIL.phcz
Antiy-AVL	Trojan/Generic.ASBOL.23A
Kingsoft	Heur.SSC.1652742.1216.(kcloud)
Arcabit	Generic.MSIL.Bladabindi.5BC49125
Microsoft	Backdoor:MSIL/Bladabindi
AhnLab-V3	Backdoor/Win32.Bladabindi.R91438
Acronis	suspicious
McAfee	Trojan-FIGN
MAX	malware (ai score=83)
VBA32	Trojan.MSIL.Disfa
Malwarebytes	Backdoor.NJRat
TrendMicro-HouseCall	BKDR_BLADABI.SMC
Rising	Backdoor.Njrat!1.9E49 (CLASSIC)
Yandex	Trojan.AvsMofer.dd6520
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/Agent.LI!tr
AVG	MSIL:Agent-DRD [Trj]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Generic.MSIL.Bladabindi.5BC49125?

Generic.MSIL.Bladabindi.5BC49125 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X