Trojan

Should I remove “Trojan.Spectreloader”?

Malware Removal

The Trojan.Spectreloader is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Spectreloader virus can do?

  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • Anomalous binary characteristics

How to determine Trojan.Spectreloader?



File Info:

name: 6879D2AAB28713EF60DD.mlw
path: /opt/CAPEv2/storage/binaries/62120711d27707537323f6eeaba45f1d45040ef5257d6e6ef5fd94f633dd9fd1
crc32: 11EF0460
md5: 6879d2aab28713ef60dd4498bdde6351
sha1: c233bbc026f70030526c567ae5f2a67b661de728
sha256: 62120711d27707537323f6eeaba45f1d45040ef5257d6e6ef5fd94f633dd9fd1
sha512: 2c2f7b2cff198b610c4582e5e6f8ee6f57f39b637c9e3464dc360c45ebf5de62b5101d001ad7e986d262f7bd9fbbeeecc0eb877d4f604224575b045aaa49ff0b
ssdeep: 6144:ybiYPog4zsdm+bp4un0NZA/WmqkeSb0C6/uHR2IAepARNaeE6gsZa:dd+byun0vdclb0C3R2I9pARN86g+a
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1B785413C3D94193BD1B5CAFAD2921857F3E02567624ADED85CC703CB14A7B02AAD192F
sha3_384: 121873243614a21d497d229c1d8c02d8874af6541356dccd837f7d6ddc0fe3a5bdf19225d1da69241b0b6d275ba35299
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2023-05-19 22:18:00


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: mrrzkcz5.dll
LegalCopyright:  
OriginalFilename: mrrzkcz5.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan.Spectreloader also known as:

LionicTrojan.Win32.Inject.1b!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Barys.431369
FireEyeGeneric.mg.6879d2aab28713ef
CAT-QuickHealTrojan.Spectreloader
McAfeeArtemis!6879D2AAB287
MalwarebytesTrojan.Injector.MSIL.Generic
VIPREGen:Variant.Barys.431369
SangforTrojan.Win32.Save.a
BitDefenderGen:Variant.Barys.431369
Cybereasonmalicious.026f70
ArcabitTrojan.Barys.D69509
CyrenW64/MSIL_Tiny.AF.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.VRP
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.MSIL.Inject.gen
AlibabaTrojan:MSIL/Inject.0a38cb4c
ViRobotTrojan.Win.Z.Injector.1861632
SophosMal/MSIL-VK
F-SecureHeuristic.HEUR/AGEN.1313922
DrWebTrojan.InjectNET.14
TrendMicroTROJ_GEN.R03BC0DF523
McAfee-GW-EditionBehavesLike.Win64.Generic.tz
Trapminesuspicious.low.ml.score
EmsisoftGen:Variant.Barys.431369 (B)
IkarusTrojan.MSIL.Injector
AviraHEUR/AGEN.1313922
MicrosoftTrojan:MSIL/SpectreLoader.A!MTB
ZoneAlarmHEUR:Trojan.MSIL.Inject.gen
GDataGen:Variant.Barys.431369
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C5384769
ALYacGen:Variant.Barys.431369
MAXmalware (ai score=89)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R03BC0DF523
TencentTrojan.MSIL.Inject.16000647
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Injector.VOE!tr
AVGWin64:InjectorX-gen [Trj]
AvastWin64:InjectorX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Spectreloader?

Trojan.Spectreloader removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment