Trojan:MSIL/Bladabindi.OK!MTB removal

The Trojan:MSIL/Bladabindi.OK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Bladabindi.OK!MTB virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:MSIL/Bladabindi.OK!MTB?


File Info:
crc32: 7ACF4848
md5: 69bd982f6a9e73a9576f4d1068bd4213
name: 69BD982F6A9E73A9576F4D1068BD4213.mlw
sha1: 0ff1fec0b19d94a31dc2a0ae37b0fc9c625689b5
sha256: 9313269375447404243033c209c8afcd782ba2f0ed444942aec76a3169d5c85f
sha512: 972b7dddd9088de89e52b2699aa53aac7f41e87deab2713dc201e8e88505e0def47e7b9779712b33c05200ae8c4ce8136f60a6254c85b78add09e4067f5d0a71
ssdeep: 768:KGcQHo9fH36IRuNFWMN7ec2RN4UtVW9Xu7W/Zq7YzUM3+XC1GdehtCRGYw3YgoE:HcKo9PfYXNycy4CNTv
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: OneDrive.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: OneDrive
ProductVersion: 1.0.0.0
FileDescription: OneDrive
OriginalFilename: OneDrive.exe

Trojan:MSIL/Bladabindi.OK!MTB also known as:

Lionic	Trojan.MSIL.Bladabindi.m!c
Elastic	malicious (high confidence)
DrWeb	BackDoor.BladabindiNET.10
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.MSILHeracles.24799
Cylance	Unsafe
Zillya	Backdoor.Bladabindi.Win32.25648
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/Bladabindi.c71b239b
K7GW	Trojan ( 005174541 )
Cybereason	malicious.f6a9e7
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Bladabindi.IU
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
BitDefender	Gen:Variant.MSILHeracles.24799
MicroWorld-eScan	Gen:Variant.MSILHeracles.24799
Tencent	Msil.Backdoor.Bladabindi.Wrhd
Ad-Aware	Gen:Variant.MSILHeracles.24799
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34170.im0@a8NNMfm
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.69bd982f6a9e73a9
Emsisoft	Trojan.Bladabindi (A)
SentinelOne	Static AI – Malicious PE
Avira	TR/Spy.Gen8
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:MSIL/Bladabindi.OK!MTB
Arcabit	Trojan.MSILHeracles.D60DF
GData	Gen:Variant.MSILHeracles.24799
AhnLab-V3	Trojan/Win.Generic.C4564521
McAfee	GenericRXAA-AA!69BD982F6A9E
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.1590992093
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DIP21
Ikarus	Trojan.MSIL.Bladabindi
Fortinet	MSIL/Bladabindi.AZ!tr
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml

How to remove Trojan:MSIL/Bladabindi.OK!MTB?

Trojan:MSIL/Bladabindi.OK!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X