Trojan

Trojan:Win32/SystemBC.psyD!MTB removal

Malware Removal

The Trojan:Win32/SystemBC.psyD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/SystemBC.psyD!MTB virus can do?

  • Sample contains Overlay data
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Anomalous binary characteristics

How to determine Trojan:Win32/SystemBC.psyD!MTB?



File Info:

name: 4BD7AED34643B01C06EB.mlw
path: /opt/CAPEv2/storage/binaries/3f8747a00bb07cb942184f47dcd7355ee8de2c7ed9ae2ed34da798a2749b7abe
crc32: 8D3658B7
md5: 4bd7aed34643b01c06eba90decfd9e4b
sha1: 3d6f582cfc5d49ef4afccab0ad7e80d056040c60
sha256: 3f8747a00bb07cb942184f47dcd7355ee8de2c7ed9ae2ed34da798a2749b7abe
sha512: dfd6e6da32fef4ce4781311cc7dbb2bd3b057e7231ea5a4af822f4fe1da150d8049ca6eeda6941db13794fc887b771fb512018caa7678dd75835b8df5fdb3f35
ssdeep: 3072:XMq3qCEqUTIzWodffH/oDY/FBkyygR7Lxnf4kNp:cq3q9bT1oxPwEtB3t4kz
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T16FE39E739545A8B3C245003214625B6F1EE9AF770738EC9FCA546A9D3EF86E2D330253
sha3_384: 7704233100c52336bd9db88fc7626d938c647d640f9b3a4324ec16757a54b18c1e3bd8bddeba05e0e11cbffe16d0dbdd
ep_bytes: 558bec81ec5c04000056578365f40083
timestamp: 2010-06-08 16:04:46


Version Info:

CompanyName: Shenzhen QVOD Technology Co.,Ltd
FileDescription: QvodInstall Module
FileVersion: 3, 0, 0, 0
InternalName: QvodInstall.exe
LegalCopyright: Copyright(C) 2006-2009 QVOD
OriginalFilename: QvodInstall.exe
ProductName: QvodInstall Module
ProductVersion: 3, 0, 0, 0
Translation: 0x0409 0x04b0

Trojan:Win32/SystemBC.psyD!MTB also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Win32.QVod.A
ClamAVWin.Trojan.Rootkit-6659
CAT-QuickHealExploit.ShellCode.Gen
SkyhighBehavesLike.Win32.Trojan.ch
McAfeeGeneric Dropper.uk
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Win32.QVod.A
SangforSuspicious.Win32.Save.ins
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_100% (W)
BaiduWin32.Virus.Wapomi.a
VirITWorm.Win32.Generic.BJZE
SymantecW32.Wapomi.B
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Wapomi.K
ZonerProbably Heur.ExeHeaderP
APEXMalicious
CynetMalicious (score: 100)
KasperskyWorm.Win32.Qvod.ni
BitDefenderGen:Win32.QVod.A
NANO-AntivirusTrojan.Win32.Qvod.brvuu
AvastWin32:Jadtre-C [Rtk]
TencentWorm.Win32.Qvod.ta
EmsisoftGen:Win32.QVod.A (B)
F-SecureMalware.W32/Wapomi.J
DrWebTrojan.Hostar.3
ZillyaWorm.Qvod.Win32.476
TrendMicroPE_PIKORAV.SM-O
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.4bd7aed34643b01c
SophosMal/Rootkit-Z
SentinelOneStatic AI – Malicious PE
GDataGen:Win32.QVod.A
JiangminWorm/Qvod.ex
WebrootW32.Worm.Qvod.Gen
GoogleDetected
AviraW32/Wapomi.J
MAXmalware (ai score=87)
Antiy-AVLRiskWare/Win32.Agent.gic
XcitiumMalCrypt.Indus!@1qrzi1
ArcabitGen:Win32.QVod.A
ZoneAlarmWorm.Win32.Qvod.ni
MicrosoftTrojan:Win32/SystemBC.psyD!MTB
VaristW32/Pikorms.A.gen!Eldorado
AhnLab-V3Trojan/Win32.Qvod.R2044
Acronissuspicious
BitDefenderThetaGen:NN.ZedlaF.36744.iq9@aCCimNeb
ALYacGen:Win32.QVod.A
TACHYONWorm/W32.Qvod.143009
VBA32Rootkit.Agent
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallPE_PIKORAV.SM-O
RisingTrojan.Wapomi!1.DCFE (CLASSIC)
IkarusVirus.Win32.Virut
MaxSecureVirus.W32.Qvod.B
FortinetW32/Qvod.C!tr.pws
AVGWin32:Jadtre-C [Rtk]
DeepInstinctMALICIOUS

How to remove Trojan:Win32/SystemBC.psyD!MTB?

Trojan:Win32/SystemBC.psyD!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment