Trojan.Bladabindi.B

By Sumo3000 in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	119

First Seen:	September 14, 2012
Last Seen:	September 19, 2022
OS(es) Affected:	Windows

Trojan.Bladabindi.B is a Trojan that targets Windows computers. Trojan.Bladabindi.B is a security risk to your computer system and privacy. Trojan.Bladabindi.B may access the compromised PC through security holes, or may invade the machine via removable devices like an infected USB drives. Trojan.Bladabindi.B can result in computer functionality issues and incorporate your computer into numerous illicit actions. Trojan.Bladabindi.B can disguise itself on the affected PC and attempt to bypass the detection and elimination of anti-virus programs by using the original names of genuine Windows files. Trojan.Bladabindi.B can harm the vulnerable PC, use personal accounts or drop other malware infections. Trojan.Bladabindi.B can install Browser Helper Objects (BHOs), spy on the PC owner's online behavior, steal passwords and access email accounts for spreading other security threats via spam emails using your personal email address.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	MSIL5.BLED
Fortinet	W32/Agent.ZYAB!tr
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.fh
DrWeb	BackDoor.Bladabindi.1056
Kaspersky	Trojan.MSIL.Agent.zyab
Symantec	Backdoor.Trojan
McAfee	RDN/Generic BackDoor!b2p
AVG	MSIL5.ARPM
Fortinet	W32/Agent.FMSD!tr
Ikarus	Trojan.MSIL.Inject
Kaspersky	Trojan.MSIL.Agent.fmsd
McAfee	RDN/Generic BackDoor!b2l
AVG	MSIL5.AUBS
Fortinet	W32/Agent.FMVZ!tr
Ikarus	Trojan-Spy.MSIL.Keylogger

SpyHunter Detects & Remove Trojan.Bladabindi.B

File System Details

Trojan.Bladabindi.B may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	usbnaw32.dll	3edb53e51ea5accc36e8880bbd7f974d	47
Name: usbnaw32.dll MD5: 3edb53e51ea5accc36e8880bbd7f974d Size: 156.67 KB (156672 bytes) Detections: 47 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: September 19, 2012
2.	Server_protected1.exe	905d0bb9ac7158a4a1ba0f4b7fb4680b	19
Name: Server_protected1.exe MD5: 905d0bb9ac7158a4a1ba0f4b7fb4680b Size: 1.26 MB (1262080 bytes) Detections: 19 Type: Executable File Path: C:\Program Files (x86)\Holo\Wifi Detect\Server_protected1.exe Group: Malware file Last Updated: September 19, 2022
3.	Adobe FlashPlayer ActiveX_29_11_345.exe	20ca41c29c96dfba5a631a32285cbd72	14
Name: Adobe FlashPlayer ActiveX_29_11_345.exe MD5: 20ca41c29c96dfba5a631a32285cbd72 Size: 691.71 KB (691712 bytes) Detections: 14 Type: Executable File Path: %APPDATA%\Adobe FlashPlayer Software Group: Malware file Last Updated: February 10, 2015
4.	Adobe FlashPlayer ActiveX_29_11_577.exe	debaf639c503e4bd1e45afcfd213e759	6
Name: Adobe FlashPlayer ActiveX_29_11_577.exe MD5: debaf639c503e4bd1e45afcfd213e759 Size: 680.96 KB (680960 bytes) Detections: 6 Type: Executable File Path: %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: February 10, 2015
5.	Adobe FlashPlayer ActiveX_29_11_345.exe	36cae9931db5ddfb3fa48187ebf6be1c	4
Name: Adobe FlashPlayer ActiveX_29_11_345.exe MD5: 36cae9931db5ddfb3fa48187ebf6be1c Size: 686.59 KB (686592 bytes) Detections: 4 Type: Executable File Path: %APPDATA%\Adobe FlashPlayer Software Group: Malware file Last Updated: February 10, 2015
6.	3420ac19f9104edbeab033132fecd080.exe	ba5185281ceed0fc5ab5a2cf9d196c09	3
Name: 3420ac19f9104edbeab033132fecd080.exe MD5: ba5185281ceed0fc5ab5a2cf9d196c09 Size: 88.57 KB (88576 bytes) Detections: 3 Type: Executable File Path: %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: January 21, 2013
7.	ChromeBrowser.exe	e90e05865e5490dac070df1509b166c9	3
Name: ChromeBrowser.exe MD5: e90e05865e5490dac070df1509b166c9 Size: 475.13 KB (475136 bytes) Detections: 3 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: February 10, 2015
8.	Adobe FlashPlayer ActiveX_29_11_577.exe	015889e8a45e3dcb944f316ebefef1a7	2
Name: Adobe FlashPlayer ActiveX_29_11_577.exe MD5: 015889e8a45e3dcb944f316ebefef1a7 Size: 463.87 KB (463872 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\Adobe FlashPlayer Software Group: Malware file Last Updated: February 10, 2015
9.	23730.exe	dc5a05def5a7644826bf61749a4a1f31	1
Name: 23730.exe MD5: dc5a05def5a7644826bf61749a4a1f31 Size: 99.32 KB (99328 bytes) Detections: 1 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: September 17, 2012
10.	adobe flashplayer service.exe	1607535419d499476657fe0922425100	1
Name: adobe flashplayer service.exe MD5: 1607535419d499476657fe0922425100 Size: 383.48 KB (383488 bytes) Detections: 1 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: February 10, 2015
11.	usbnaw32.dll
Name: usbnaw32.dll Type: Dynamic link library Group: Malware file
12.	%USERPROFILE%\trojan.exe
Name: %USERPROFILE%\trojan.exe Type: Executable File Group: Malware file
13.	%USERPROFILE%\Local Settings\Temp\server.exe
Name: %USERPROFILE%\Local Settings\Temp\server.exe Type: Executable File Group: Malware file
14.	c7192e982641757f14f66356bb4cf303.exe
Name: c7192e982641757f14f66356bb4cf303.exe Type: Executable File Group: Malware file
15.	! my picutre.scr
Name: ! my picutre.scr Group: Malware file

Registry Details

Trojan.Bladabindi.B may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "c7192e982641757f14f66356bb4cf303" = ""C:\Documents and settings\Administrator\trojan.exe" .."

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "[VALUE]" = "[MALWARE PATH AND FILE NAME]"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[VALUE]" = "[MALWARE PATH AND FILE NAME]"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "C:\Documents and Settings\Administrator\trojan.exe" = "C:\Documents and Settings\Administrator\trojan.exe:*:enabled:tr

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Bladabindi.B

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Trojan.Bladabindi.B

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen