Should I block it?

90%

90% of PCs block this file from running.

Possible reason:

Multiple malware detections

Additional versions

3.0.2.258	16.67%
3.0.2.258	83.33%

(Note, Bitdefender SRL publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

advapi32.dll

ImpersonateSelf, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, RegUnLoadKeyW, RegSetValueExW, RegLoadKeyW, AdjustTokenPrivileges, RegEnumValueW, RegOpenKeyW, LookupPrivilegeValueW, RegQueryInfoKeyW, RegCreateKeyExW, OpenThreadToken, RegEnumKeyExW

crypt32.dll

CryptMsgGetParam, CertFindCertificateInStore, CryptHashToBeSigned, CryptQueryObject

kernel32.dll

LoadLibraryW, GetProcAddress, FreeLibrary, LoadLibraryExW, lstrlenW, LoadLibraryA, GetCurrentThread, GetLastError, GetFileAttributesW, IsDebuggerPresent, SetUnhandledExceptionFilter, GetVersionExW, OutputDebugStringW, CreateFileW, DeviceIoControl, ExpandEnvironmentStringsW, QueryPerformanceFrequency, QueryPerformanceCounter, OutputDebugStringA, GetCurrentProcessId, GetTickCount, GetLocalTime, InterlockedIncrement, InterlockedExchange, GetCurrentProcess, GetCurrentThreadId, LeaveCriticalSection, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, Sleep, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, GetSystemDirectoryW, CloseHandle, GetSystemTimeAsFileTime

msvcp90.dll

DllMain

msvcr90.dll

DllMain

user32.dll

wsprintfW

Export table

BdCreateObject

BdDestroyObject

safebootal.dll

Bitdefender Security by Bitdefender SRL (Signed)

Remove safebootal.dll

Version:	3.0.2.258
MD5:	7bb3472f9aca0e3106be524ce0e679ec
SHA1:	42a1a23927e79e30ffb1e2287479e4ef807f37df
SHA256:	0b2b3d1fa6963109c32c9934c0a44d95f7f5c73e37e00eb3862b90b1ce538118

Warning 4 antivirus scanners has detected malware.

Overview

safebootal.dll is malware that is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Bitdefender SRL which was issued by the VeriSign certificate authority (CA).

Details

File name:	safebootal.dll
Publisher:	Bitdefender
Product name:	Bitdefender Security
Description:	BitDefender SafeBootAL
Typical file path:	C:\Program Files\bitdefender\bitdefender 2013\safebootal.dll
Original name:	safeboot_C3_BC2_MV110_PV2013.dll
File version:	3.0.2.258
Size:	91.95 KB (94,160 bytes)
Certificate
Issued to:	Bitdefender SRL
Authority (CA):	VeriSign
Effective date:	Wednesday, December 14, 2011
Expiration date:	Friday, December 14, 2012
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Malware detections

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.

Antivirus engine	Engine version	Detection
Avira AntiVir	7.11.54.248	TR/PSW.Zbot.6445
NANO AntiVirus	0.20.4.48163	Trojan.Win32.Panda.bbwupk
nProtect	2012-12-27.03	Trojan/W32.Agent.94160.B
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.F47V1224