home

colbactd.dll

The library colbactd.dll has been detected as malware by 20 anti-virus scanners.
Version:
1.0

MD5:
9c1a5d9052db308616af291aa3694ffc

SHA-1:
51e50e30104543a3a1089f87a35306d7a5e918b1

SHA-256:
736e9beaac871139959fc83ab99ce8adb14a833aa923b26d27dce954a5c11a26

Scanner detections:
20 / 68

Status:
Malware

Analysis date:
4/25/2024 4:37:44 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.14610035
596

Avira AntiVirus
TR/Mediyes.Gen6
8.3.1.6

Arcabit
Trojan.Generic.DDEEE73
1.0.0.425

avast!
Win64:Dropper-gen [Drp]
2014.9-150527

AVG
Cryptic
2016.0.3096

Baidu Antivirus
Trojan.Win64.Agent
4.0.3.15618

Bitdefender
Trojan.Generic.14610035
1.0.20.845

Emsisoft Anti-Malware
Trojan.Generic.14610035
8.15.06.18.02

ESET NOD32
Win64/Agent.BP trojan
7.0.302.0

Fortinet FortiGate
W64/Agent.BP!tr
6/18/2015

F-Secure
Trojan.Generic.14610035
11.2015-18-06_5

G Data
Trojan.Generic.14610035
15.6.25

IKARUS anti.virus
Trojan.Win64.Agent
t3scan.1.9.5.0

K7 AntiVirus
Trojan
13.204.16131

McAfee
Artemis!9C1A5D9052DB
5600.6730

Microsoft Security Essentials
Threat.Undefined
1.199.824.0

MicroWorld eScan
Trojan.Generic.14610035
16.0.0.507

nProtect
Trojan.Generic.14610035
15.06.02.01

Qihoo 360 Security
Win32/Trojan.b46
1.0.0.1015

Trend Micro House Call
Suspicious_GEN.F47V0528
7.2.169

File size:
50 KB (51,200 bytes)

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\colbactd.dll

File PE Metadata
Compilation timestamp:
5/26/2011 6:34:02 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:Symrm+3kJcDZSwIQeQQgND79uLAj6FWYPjdXoYi/JTUs4GznEUgCb4BPYvL:eC+3keIQeQQgND79jjPYpYIGVgCawvL

Entry address:
0x8C10

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 4B, 02, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 8B, FE, FF, FF, CC, CC, CC, 48, 8D, 0D, E1, 34, 00, 00, E9, D4, 02, 00, 00, 40, 53, 48, 83, EC, 20, 48, 8B, D9, 48, 8B, 0D, F4, 34, 00, 00, FF, 15, 36, 85, FF, FF, 48, 89, 44, 24, 38, 48, 83, F8, FF, 75, 0B, 48, 8B, CB, FF, 15, EA, 84, FF, FF, EB, 7E, B9, 08, 00, 00, 00, E8, B0, 02...
 
[+]

Code size:
40.5 KB (41,472 bytes)

Remove colbactd.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.