Ransom • Trojan

Trojan-Ransom.Win32.Encoder.bd malicious file

The Trojan-Ransom.Win32.Encoder.bd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Encoder.bd virus can do?

Reads data out of its own binary image
Uses Windows utilities for basic functionality
Exhibits possible ransomware file modification behavior
Network activity detected but not expressed in API logs

How to determine Trojan-Ransom.Win32.Encoder.bd?


File Info:
crc32: 9AF50A5C
md5: feb545f12d2c18e04e17c16adc6c4b8c
name: FEB545F12D2C18E04E17C16ADC6C4B8C.mlw
sha1: e4bdba83c4ec476a02f6917c8a05344f3597f9eb
sha256: a87b7560b08c20b2f3d8047e2d6e97a35001a3027cd26c71bdac278c6cf82a41
sha512: b162b09b409ed73c1df7ad6f0715d05817416eb044c471d3271eb36b1d84ce61ba505b944d67e3763caed1f057812c297caf89fd2ca7dc813d6c7f27eff31d0e
ssdeep: 6144:/zWPYSc7LT8VFnr6HnTSLnhVpgHIasHcFqEA1zWPYSc7LT8VFna9pX5:/z4s0FunTSLnhD4scFqEA1z4s0Fa9v
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (c) 1999-2016 Igor Pavlov
InternalName: 7zS.sfx
FileVersion: 16.04
CompanyName: Igor Pavlov
ProductName: 7-Zip
ProductVersion: 16.04
FileDescription: 7z Setup SFX
OriginalFilename: 7zS.sfx.exe
Translation: 0x0409 0x04b0

Trojan-Ransom.Win32.Encoder.bd also known as:

Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.3c4ec4
Symantec	Trojan Horse
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan-Ransom.Win32.Encoder.bd
Tencent	Win32.Trojan.Encoder.Ehrp
Comodo	Malware@#3d61zzcpyd3sb
BitDefenderTheta	Gen:NN.ZexaF.34722.yu3@aeukxVmi
FireEye	Generic.mg.feb545f12d2c18e0
Microsoft	Trojan:Win32/Zpevdo.A
AegisLab	Trojan.Win32.Encoder.j!c
TACHYON	Ransom/W32.Encoder.394758
AhnLab-V3	Malware/Win32.Generic.C2717864
McAfee	Artemis!FEB545F12D2C
MAX	malware (ai score=100)
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.87 (RDML:JIgnAEyrh/9OLqqu8vz/AA)
Yandex	Trojan.Encoder!bn+8mFv1qSA
Fortinet	W32/Encoder.BD!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan-Ransom.Win32.Encoder.bd?

Trojan-Ransom.Win32.Encoder.bd removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X