Trojan

Trojan-Banker.Win32.RTM.hun removal instruction

Malware Removal

The Trojan-Banker.Win32.RTM.hun is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan-Banker.Win32.RTM.hun virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Trojan-Banker.Win32.RTM.hun?



File Info:

crc32: 3A9ACC34
md5: 4453e12e32fab6d458568a98541ab053
name: 4453E12E32FAB6D458568A98541AB053.mlw
sha1: 5f7dc74ed297191b17a9867c291f6a4dd6fe3694
sha256: 3a1a05b0e2f40344c766dee67667f1b1d391da87b6dc8cd5796c5280ef41562d
sha512: cd1ab5a1faa0c53d2343495b0342f70c7bf73982a53b60e24d820f14bd38bb373f18e62bcdcc92c6c95adbcaff3db6d835e180e2f132d565310b9367f7fa87d7
ssdeep: 6144:NvU+9DR9L2Y6fGKUjts0/UCLk3+gA5sE5uHdTavy:OkvIfnMs596S9Tavy
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright xa9 2016
InternalName: Java Control Panel
FileVersion: 11.121.2.13
Full Version: 11.121.2.13
CompanyName: Oracle Corporation
ProductName: Java(TM) Platform SE 8 U121
ProductVersion: 8.0.1210.13
FileDescription: Java Control Panel
OriginalFilename: javacpl.exe
Translation: 0x0409 0x04b0

Trojan-Banker.Win32.RTM.hun also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Inject4.6403
MicroWorld-eScanTrojan.GenericKD.45262383
FireEyeGeneric.mg.4453e12e32fab6d4
McAfeeGenericRXNE-LU!4453E12E32FA
CylanceUnsafe
AegisLabHacktool.Win32.Krap.lKMc
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.45262383
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_70% (D)
BitDefenderThetaGen:NN.ZedlaF.34700.ww8@aaqZR1oi
CyrenW32/Trojan.VFJN-9089
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BankerX-gen [Trj]
KasperskyTrojan-Banker.Win32.RTM.hun
AlibabaTrojanBanker:Win32/Kryptik.c1977d01
RisingMalware.Obscure/Heur!1.A89E (CLASSIC)
Ad-AwareTrojan.GenericKD.45262383
EmsisoftTrojan.GenericKD.45262383 (B)
TrendMicroTROJ_GEN.R002C0RLV20
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-R + Mal/EncPk-APV
JiangminTrojan.Banker.RTM.vh
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftProgram:Win32/Ymacco.AA3A
GridinsoftTrojan.Win32.Downloader.oa
ArcabitTrojan.Generic.D2B2A62F
ZoneAlarmTrojan-Banker.Win32.RTM.hun
GDataTrojan.GenericKD.45262383
CynetMalicious (score: 100)
VBA32BScope.Trojan.Diple
ALYacTrojan.GenericKD.45262383
MAXmalware (ai score=81)
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.HILY
TrendMicro-HouseCallTROJ_GEN.R002C0RLV20
TencentWin32.Trojan-banker.Rtm.Pbff
IkarusTrojan.Win32.Crypt
eGambitUnsafe.AI_Score_95%
FortinetW32/Kryptik.HIDC!tr
AVGWin32:BankerX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.053

How to remove Trojan-Banker.Win32.RTM.hun?

Trojan-Banker.Win32.RTM.hun removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment