Trojan

Trojan.Injector.BDR (B) removal instruction

Malware Removal

The Trojan.Injector.BDR (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Injector.BDR (B) virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Injector.BDR (B)?



File Info:

name: 9FB51384F125E545F47A.mlw
path: /opt/CAPEv2/storage/binaries/4b4b95b59aaf70287edbb844f7e14e9226f366d1eaf57f8a581d1115f86009c6
crc32: A4C79F7F
md5: 9fb51384f125e545f47a34bb30100ce0
sha1: 475ebc6f31dba5f63f56f8c1dcdcd2d4e521f65e
sha256: 4b4b95b59aaf70287edbb844f7e14e9226f366d1eaf57f8a581d1115f86009c6
sha512: 6acccea951438de557939a92141d1524a8ed33f76ddc1bf849871c00cddafe6edbeb5f95c43da055c1a75c164fcaddb486d9c5370192b890006b9426ab42c21f
ssdeep: 6144:TL3Ny+59gyurNwVBQosoRvQWkpmRvHCO7Fi9:TL9yug5NJyvQWkpm5HCv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B644F113F6813460E0A24E3644C767270DABAC92133268DB478C5A6EBB5FBC4E635F75
sha3_384: 1408416a9ce63bc46d278c3e8aa194a02732292cda5d9510528cd97c9ee7f051964b3df9c3a4433cb4f59044e4d8e316
ep_bytes: 8945fa33c9525168c1c54100ff157842
timestamp: 2012-10-05 15:24:46


Version Info:

FileDescription: TrendSecure force unlnstall tool                            
LegalCopyright:                                                             
InternalName: stub32                                                      
ProductName: Trend Internet Security Pro                                 
CompanyName: Franzis Verlag GmbH
ProductVersion: 4.3.9.1
Translation: 0x0409 0x0000

Trojan.Injector.BDR (B) also known as:

Elasticmalicious (high confidence)
DrWebTrojan.PWS.Panda.2401
MicroWorld-eScanTrojan.Injector.BDR
FireEyeGeneric.mg.9fb51384f125e545
CAT-QuickHealTrojanSpy.Zbot.D4
ALYacTrojan.Injector.BDR
CylanceUnsafe
ZillyaTrojan.Spy.Win32.45
SangforTrojan.Win32.Save.a
K7AntiVirusSpyware ( 0029a43a1 )
AlibabaTrojanSpy:Win32/PWSZbot.729ce968
K7GWSpyware ( 0029a43a1 )
Cybereasonmalicious.4f125e
BitDefenderThetaGen:NN.ZexaF.34212.qq1@a0dtwwmi
VirITTrojan.Win32.Dropper.JY
CyrenW32/Trojan.IIBH-6380
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Spy.Zbot.AAO
ClamAVWin.Trojan.Zbot-61977
KasperskyTrojan-Spy.Win32.Zbot.uscm
BitDefenderTrojan.Injector.BDR
NANO-AntivirusTrojan.Win32.Zbot.dkncky
AvastWin32:Dropper-gen [Drp]
TencentMalware.Win32.Gencirc.10b52087
Ad-AwareTrojan.Injector.BDR
TACHYONTrojan-Spy/W32.ZBot.274446
EmsisoftTrojan.Injector.BDR (B)
ComodoTrojWare.Win32.Spy.Zbot.USC@5islus
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Injector.dc
SophosMal/Generic-R + Troj/Agent-AKSW
IkarusTrojan-Spy.Agent
GDataTrojan.Injector.BDR
JiangminTrojanSpy.Zbot.fpmj
WebrootW32.Trojan.Dropper
AviraTR/Crypt.ZPACK.htrex.3
Antiy-AVLTrojan/Generic.ASMalwS.D6B0B1
KingsoftWin32.Troj.Zbot.us.(kcloud)
MicrosoftPWS:Win32/Zbot
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Zbot.R129191
Acronissuspicious
McAfeeGenericATG-FAXO!9FB51384F125
MAXmalware (ai score=100)
VBA32TrojanSpy.Zbot
APEXMalicious
RisingTrojan.Spy.Win32.Zbot.gba (CLOUD)
YandexTrojanSpy.Zbot!HNk8p7HaQcQ
SentinelOneStatic AI – Malicious PE
FortinetW32/Trustezeb.K!tr
AVGWin32:Dropper-gen [Drp]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Injector.BDR (B)?

Trojan.Injector.BDR (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment