Categories: Malware

Mint.Zard.5 removal

The Mint.Zard.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mint.Zard.5 virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Mint.Zard.5?


File Info:
name: BD7AC360B231F59112ED.mlwpath: /opt/CAPEv2/storage/binaries/e110996fb5db507ce02ab073a9251da97a1a01f6d2569ec5603998ea074d5d7ecrc32: 01123366md5: bd7ac360b231f59112edd3f15cbdea55sha1: 8948bd9fe6e7a24adde942b2cc558fc68cc8b49dsha256: e110996fb5db507ce02ab073a9251da97a1a01f6d2569ec5603998ea074d5d7esha512: a8a620b85adf307ee81a71afc43ea79702d536d7b4b3a846a122551a3c84ada153ef04416d33242cccc6413e9c1e525860c6fecc9652f26348159686e8a8b01fssdeep: 12288:o94c107XZui78QDVY5OzEtdoaftbmrfJpBdyH7P+th5xQ5:o94cc8QkNgaftbMpUrttype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1C2F4BF1023A28076FF8BD1375686E357EFBC6D2A5853492F63982D79F870270276E253sha3_384: f5ae876bab95894248e301e8a9e0901e677d8d5a5ddf7c5e6d876c53d00a1fe438e0691a2cc0bcb2e8b49d69f868de89ep_bytes: 558bec837d0c017505e8bc480000ff75timestamp: 2018-03-15 20:09:23
Version Info:
Comments: http://www.autoitscript.com/autoit3/CompanyName: AutoIt TeamFileDescription: AutoIt v3 ActiveX ControlFileVersion: 3, 3, 14, 5InternalName: AutoItX3.dllLegalCopyright: ©1999-2018 Jonathan Bennett & AutoIt TeamOriginalFilename: AutoItX3.dllProductName: AutoIt v3 ActiveX ControlProductVersion: 3, 3, 14, 5Translation: 0x0809 0x04b0

Mint.Zard.5 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Mint.Zard.5
FireEye	Gen:Variant.Mint.Zard.5
Skyhigh	BehavesLike.Win32.Generic.bc
ALYac	Gen:Variant.Mint.Zard.5
Sangfor	Trojan.Win32.Agent.Vmk2
K7AntiVirus	Trojan ( 005ab4bf1 )
K7GW	Trojan ( 005ab4bf1 )
CrowdStrike	win/malicious_confidence_70% (D)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Patched.NKM
Kaspersky	Virus.Win32.Senoval.a
BitDefender	Gen:Variant.Mint.Zard.5
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Avast	Win32:Patched-AWW [Trj]
Tencent	Trojan.Win32.Pathced_ya.16001052
Emsisoft	Gen:Variant.Mint.Zard.5 (B)
DrWeb	Win32.Beetle.2
VIPRE	Gen:Variant.Mint.Zard.5
TrendMicro	TROJ_GEN.R002C0DJ223
Sophos	W32/Patched-CD
GData	Gen:Variant.Mint.Zard.5
Google	Detected
Varist	W32/Doina.BA.gen!Eldorado
Antiy-AVL	Trojan/Win32.Patched
Arcabit	Trojan.Mint.Zard.5
ZoneAlarm	Virus.Win32.Senoval.a
Microsoft	Trojan:Win32/Doina.RPX!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C5482219
McAfee	RDN/Generic.hra
MAX	malware (ai score=88)
VBA32	BScope.Trojan.Meterpreter
Malwarebytes	Trojan.Patched
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DJ223
Rising	Trojan.Generic@AI.100 (RDML:lY5M7K4uxxJz2T9qcARVBg)
Ikarus	Trojan.Win32.Patched
MaxSecure	Trojan.Malware.217969932.susgen
Fortinet	W32/Patched.IP!tr
AVG	Win32:Patched-AWW [Trj]
DeepInstinct	MALICIOUS