Categories: Trojan

Should I remove “Trojan:Win32/Pterodo.BV!MSR”?

The Trojan:Win32/Pterodo.BV!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Pterodo.BV!MSR virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Detects Bochs through the presence of a registry key
Checks the version of Bios, possibly for anti-virtualization
Checks the CPU name from registry, possibly for anti-virtualization
Accessed credential storage registry keys
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Trojan:Win32/Pterodo.BV!MSR?


File Info:
name: 25774252FA4945E7106B.mlwpath: /opt/CAPEv2/storage/binaries/940ed99abb8a1d9dd7269ebb27f34605bd715dcc45d75f17ad059139219e6dc0crc32: 26554C06md5: 25774252fa4945e7106ba5f3d7a328d8sha1: eca31ab27cf6134040644d2b57a6d46c8b552e98sha256: 940ed99abb8a1d9dd7269ebb27f34605bd715dcc45d75f17ad059139219e6dc0sha512: 74c6fdce82fe835f2c6ddf0eca9f9debf9c96b5083b5901ba5ea44e03cc51e2ed02796d732997c4094180d9b28f1b06e89e5dfca41592173128c573060d3e633ssdeep: 12288:vXwOrReFWQFKQ+m965S65VGxoTwEzr9VhURFVBc3nkUa:vXwOrRsgm9kzuuTXvhU1ogtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T161B412027BD5C4F9D0A90271988A6BB24875FE741F154AC39BA43D0B5FB03D5B73B28Asha3_384: d78ca729eb23d01918266aeff4d22fafda8cba29192b3a7defd58be7184ad73b5a4b70abb1b86236fac22217e4ac0416ep_bytes: 558bec6aff6870c4410068c095410064timestamp: 2012-12-31 00:38:51
Version Info:
CompanyName: Microsoft CorporationFileDescription: Troubleshoot Display AdapterFileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)InternalName: AdapterTroubleshooterLegalCopyright: © Microsoft Corporation. All rights reserved.OriginalFilename: AdapterTroubleshooter.exeProductName: Microsoft® Windows® Operating SystemProductVersion: 6.1.7600.16385Translation: 0x0409 0x04b0

Trojan:Win32/Pterodo.BV!MSR also known as:

Bkav	W32.Common.7EA8F58F
Lionic	Trojan.Win32.Gamaredon.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.GenericKD.50321344
FireEye	Generic.mg.25774252fa4945e7
Skyhigh	BehavesLike.Win32.PWSZbot.gc
McAfee	GenericR-MQY!25774252FA49
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 0052b2811 )
Alibaba	Trojan:BAT/Gamaredon.340f06b1
K7GW	Trojan ( 0052b2811 )
Cybereason	malicious.27cf61
Arcabit	Trojan.Generic.D2FFD7C0
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Pterodo.CL
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Pterodo-7150799-1
Kaspersky	Trojan.BAT.Gamaredon.m
BitDefender	Trojan.GenericKD.50321344
NANO-Antivirus	Trojan.Win32.Gamaredon.fpgmtl
Avast	BV:Gamaredon-F [Apt]
Tencent	Bat.Trojan.Gamaredon.Ekjl
Emsisoft	Trojan.GenericKD.50321344 (B)
F-Secure	Heuristic.HEUR/AGEN.1313323
DrWeb	Trojan.DownLoader27.53422
VIPRE	Trojan.GenericKD.50321344
TrendMicro	TROJ_GEN.R002C0DG821
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Pterodo
Webroot	W32.Trojan.BAT.Gamaredon
Avira	HEUR/AGEN.1313323
Antiy-AVL	Trojan[APT]/Win32.Gamaredon
Kingsoft	malware.kb.a.994
Microsoft	Trojan:Win32/Pterodo.BV!MSR
ViRobot	Trojan.Win32.Z.Agent.498230
ZoneAlarm	Trojan.BAT.Gamaredon.m
GData	BAT.Trojan.Agent.6ZYS7J
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R367993
VBA32	Trojan.BAT.Gamaredon
ALYac	Trojan.Dropper.Gamaredon
MAX	malware (ai score=96)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DG821
Rising	Worm.Agent!8.25 (TOPIS:E0:xFNmoFZCDJD)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.74262184.susgen
Fortinet	BAT/Agent.NFK!worm
AVG	BV:Gamaredon-F [Apt]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)