Should I remove “Trojan-GameThief.Win32.Latot.dbb”?

The Trojan-GameThief.Win32.Latot.dbb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-GameThief.Win32.Latot.dbb virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Enumerates running processes
• Expresses interest in specific running processes
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Korean
• Authenticode signature is invalid
• Code injection with CreateRemoteThread in a remote process
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process

How to determine Trojan-GameThief.Win32.Latot.dbb?

File Info:
name: B1DA29BA04190CB9EB19.mlw
path: /opt/CAPEv2/storage/binaries/f8fdfd0132919ca77229b8bd14f15c0813802d27006964c56e37a0ebfe037533
crc32: BF328AB1
md5: b1da29ba04190cb9eb19371d3791328f
sha1: e857e1c6e7ec90f468c26e5cbade729f2b49673e
sha256: f8fdfd0132919ca77229b8bd14f15c0813802d27006964c56e37a0ebfe037533
sha512: 7a9101b50366f24024c7d1f6a8e50340c27a2f10386798f6d4ecf50d81a65cb4ff11df7eea8d6463480f71744625ac1cc76e865fde127878557d2c1ebe1e2c36
ssdeep: 3072:UggNaIx6Rp0UHVikxsK2SlVTPKup/OldxGQiHnejo0q8tOu:Ugc1x8WU1ikxVhTZ/OljpostOu
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T13FF37D49968340E5EA7EC4B0CF732B27E9B57C612B9127EF6F5068560F32790D43A21B
sha3_384: dc4b8847ec16bc003afa4ec581c56bf2f49c35dcf7664547053c6f95f017157ce1b12012f16bceab9b4af882b3b56d4f
ep_bytes: 4883ec28e8db0300004883c428e986fd
timestamp: 2021-11-28 22:33:51

Version Info:
0: [No Data]

Trojan-GameThief.Win32.Latot.dbb also known as:

How to remove Trojan-GameThief.Win32.Latot.dbb?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.