Mint.Zard.5 malicious file

The Mint.Zard.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mint.Zard.5 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Mint.Zard.5?

File Info:
name: 4308033CEFEC9BA96610.mlw
path: /opt/CAPEv2/storage/binaries/75990cf0c12b091762d44b026304109f82df14b45e78f29e6b363b9e4ca72550
crc32: F5E3B27E
md5: 4308033cefec9ba966109d5cd3cdf43f
sha1: 9cae71400070ec1f2ff836913169af864850a2d5
sha256: 75990cf0c12b091762d44b026304109f82df14b45e78f29e6b363b9e4ca72550
sha512: 9290478573644d8ba4e6c67bde718b65f58defd4b5a3043cc30c8b4e23f63287e7d7aadc45542f89897604f5c641273b41e9144af89b25bc5f7f78e29938ba29
ssdeep: 12288:+kNteC0skgC5rVHT03PddwY6z2V74pV7DQ9P99g9AwQ91v0FDJwJfCTCGwHHHBst:huC0bq7tApV7DQV9C9zQ9tyDa7FnHF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T178056C227491E02ED4B35EF49929CBF96838AF621E55A8D366C03F9D3F71983C125327
sha3_384: 96dd05f610c742fd2cb2fe12550f5c3d34635e172ec654c69d02306638bd5a08dd6eac52d16bf79d3586d50399700e84
ep_bytes: 64a100000000558bec6aff6810334500
timestamp: 2000-11-09 09:22:52

Version Info:
CompanyName: Design Science, Inc.
FileDescription: Microsoft Equation Editor
FileVersion: 00110900
InternalName: Equation Editor
LegalCopyright: Copyright © Design Science, Inc. 1990-2000
LegalTrademarks: 
OriginalFilename: EQNEDT32.EXE
ProductName: Microsoft Equation Editor
ProductVersion: 3.1
Translation: 0x0409 0x04e4

Mint.Zard.5 also known as:

How to remove Mint.Zard.5?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.