Categories: Malware

MalCert-S.BD (A) removal instruction

The MalCert-S.BD (A) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MalCert-S.BD (A) virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to repeatedly call a single API many times in order to delay analysis time

How to determine MalCert-S.BD (A)?


File Info:
crc32: EB012235md5: f09729510580634089fb1b28b54be45dname: setup.exesha1: 07ec870852a6ef4e75ccc2cb344ab200fc765bc7sha256: 5415295cb5f87fe85dab59d929c1e51cc2a82bbd1bad86716cb69e36694865c5sha512: 6b9a98cd1f3a13480c93ef894c4874da5fb33174ce1c4e979ca7e3f2ce200320ef2ff0ca8ba80e7d9978ee45f4505e901804cc37203af31d38391fb2eebc3d98ssdeep: 24576:+CxHa87QhMRkN3TMCtZRsI4HcKI1IiO1ol0+bXgLZo:+C08vkdoUZnCmIi76+bXQ2type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyright (c) 2006-2014  xa9 pdfforge GmbH.FileVersion: 3.8.9.5CompanyName: xa9 pdfforge GmbH.Comments: 128 Instrument Multiplexing SnowProductName: Pascal AddressProductVersion: 3.8.9.5FileDescription: 128 Instrument Multiplexing SnowOriginalFilename: Pascal AddressTranslation: 0x0409 0x04b0

MalCert-S.BD (A) also known as:

MicroWorld-eScan	Trojan.GenericKD.33008688
CAT-QuickHeal	TrojanSpy.Zbot
Qihoo-360	Win32/Trojan.Spy.61b
McAfee	Artemis!F09729510580
Cylance	Unsafe
Zillya	Trojan.Zbot.Win32.210545
K7AntiVirus	Trojan ( 0055fa771 )
BitDefender	Trojan.GenericKD.33008688
K7GW	Trojan ( 0055fa771 )
Arcabit	Trojan.Generic.D1F7AC30
TrendMicro	TROJ_GEN.R02CC0GB220
Cyren	W32/Trojan.SDSV-1756
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/Agent.ABLV
TrendMicro-HouseCall	TROJ_GEN.R02CC0GB220
Paloalto	generic.ml
Kaspersky	Trojan-Spy.Win32.Zbot.zxjg
Alibaba	TrojanSpy:Win32/ncntg.21b1dae8
NANO-Antivirus	Trojan.Win32.Mlw.gzgpbo
Tencent	Win32.Trojan.Generic.Ebqd
Ad-Aware	Trojan.GenericKD.33008688
Emsisoft	MalCert-S.BD (A)
F-Secure	Trojan.TR/Agent.ncntg
DrWeb	Trojan.PWS.Spy.21397
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	Artemis
Fortinet	W32/Zbot.ABLV!tr
FireEye	Trojan.GenericKD.33008688
Sophos	Mal/Generic-S
Jiangmin	TrojanSpy.Zbot.fqnn
Avira	TR/Agent.ncntg
MAX	malware (ai score=86)
Endgame	malicious (moderate confidence)
Microsoft	Trojan:Win32/Occamy.C
ZoneAlarm	Trojan-Spy.Win32.Zbot.zxjg
VBA32	BScope.Trojan.Reconyc
ALYac	Trojan.Agent.Reconyc.A
Panda	Trj/CI.A
Ikarus	Trojan-Ransom.GandCrab
GData	Trojan.GenericKD.33008688
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
MaxSecure	Trojan.Malware.74810999.susgen