Malware

How to remove “Troj/Bladab-RW”?

Malware Removal

The Troj/Bladab-RW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/Bladab-RW virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Troj/Bladab-RW?


File Info:

crc32: E2C8903B
md5: 5660db4d39e1c2a7887c2b26c2f70f9b
name: vbc.exe
sha1: 656e494c33580a04d6ad08749a3f90fb7d4bb131
sha256: 322246ebcd55123f8d11816a45dde9ef1b0b041ab306fce78af896a04052e6c8
sha512: 66b4d49a740ea69f7a19cebcbad81d9851e0750aff4b18da23726555bcf605082ae25edbee251ca4401049e9759ffe5997b86ad290cba1ba7a9ec2b04dd93d3a
ssdeep: 6144:AJtN4fgraFKbahaT2pX47tKj4JwwltNHyoVI:AJw3FDhUwI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Troj/Bladab-RW also known as:

MicroWorld-eScanTrojan.GenericKD.43570372
FireEyeGeneric.mg.5660db4d39e1c2a7
ALYacTrojan.GenericKD.43570372
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
K7AntiVirusTrojan ( 0056081c1 )
BitDefenderTrojan.GenericKD.43570372
K7GWTrojan ( 0056081c1 )
Cybereasonmalicious.c33580
TrendMicroTROJ_FRS.0NA103GU20
CyrenW32/MSIL_Kryptik.BGN.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaTrojan:Win32/Maldoc.ali2000008
NANO-AntivirusTrojan.Win32.Agensla.hpoxiu
ViRobotTrojan.Win32.S.Infostealer.357376.A
TencentWin32.Trojan.Crypt.Svhg
Endgamemalicious (high confidence)
SophosTroj/Bladab-RW
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebTrojan.PWS.Siggen2.52844
Invinceaheuristic
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.GenericKD.43570372 (B)
IkarusTrojan.Inject
GDataTrojan.GenericKD.43570372
AviraTR/Crypt.XDR.Gen
MAXmalware (ai score=85)
MicrosoftTrojan:MSIL/Formbook.VN!MTB
ArcabitTrojan.Generic.D298D4C4
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_Generic.C4172943
Acronissuspicious
BitDefenderThetaGen:NN.ZemsilF.34144.vmW@aqjgn6p
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.MalPack.XOR
ESET-NOD32a variant of MSIL/Kryptik.WOX
TrendMicro-HouseCallTROJ_FRS.0NA103GU20
RisingTrojan.Kryptik!8.8 (CLOUD)
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetMSIL/Kryptik.WOU!tr
Ad-AwareTrojan.GenericKD.43570372
Qihoo-360Generic/Trojan.PSW.374
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Troj/Bladab-RW?

Troj/Bladab-RW removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment