Trojan.Win32.Mucc.ndb removal tips

The Trojan.Win32.Mucc.ndb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Mucc.ndb virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Mucc.ndb?


File Info:
crc32: 16C16BDC
md5: d8b8972c0ccd798a3d6fb7a9770a5183
name: D8B8972C0CCD798A3D6FB7A9770A5183.mlw
sha1: 8c43bc64037b04b2414487fdec064fc6e44f595f
sha256: e1495c129b26d4e3902366037e9ee8946bc6fbc17c5b7587fcc4e40245093ea2
sha512: f887aa2d89233ccbf8f08394b74103a97e5a6aa8b388314f18e1aa7f0f0498c05df29f0cefc7b5b0cc54d8af3d07b66b7bdccdb4296336caa57a6d2c7eb84ec1
ssdeep: 768:bsK8KpLv62opHSIH35kVtHDOSrGKk/uCEVnhKUAb8qsAqXjSa4SbfHWNhJzeh/f:bi4LM1SIH35kVhOPCncIqsdma5uZJu
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: udhulingerne
FileVersion: 4.00
CompanyName: Slower Good Corporation
ProductName: jestene
ProductVersion: 4.00
OriginalFilename: udhulingerne.exe

Trojan.Win32.Mucc.ndb also known as:

DrWeb	Trojan.VbCrypt.2108
MicroWorld-eScan	Trojan.GenericKD.36355173
Qihoo-360	Win32/Trojan.Mucc.HgIASPIA
ALYac	Trojan.GenericKD.36355173
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.36355173
K7GW	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZevbaF.34574.hm0@ayfTttfi
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Mucc.ndb
Alibaba	TrojanDownloader:Win32/VBCryptor.75be0dc9
Ad-Aware	Trojan.GenericKD.36355173
Emsisoft	Trojan.GenericKD.36355173 (B)
Comodo	.UnclassifiedMalware@0
F-Secure	Trojan.TR/AD.VBCryptor.sfpma
TrendMicro	TrojanSpy.Win32.SUSPECTCRC.USMANBG21
McAfee-GW-Edition	BehavesLike.Win32.Trojan.cm
FireEye	Generic.mg.d8b8972c0ccd798a
Sophos	Mal/Generic-S
Avira	TR/AD.VBCryptor.sfpma
Kingsoft	Win32.Troj.Mucc.n.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D22ABC65
ZoneAlarm	Trojan.Win32.Mucc.ndb
GData	Trojan.GenericKD.36355173
Cynet	Malicious (score: 85)
McAfee	RDN/packed-ftb
MAX	malware (ai score=88)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
ESET-NOD32	Win32/TrojanDownloader.Agent.FBJ
TrendMicro-HouseCall	TrojanSpy.Win32.SUSPECTCRC.USMANBG21
Rising	Downloader.Agent!8.B23 (CLOUD)
Ikarus	Trojan.VB.Crypt
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.FBTH!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Trojan.Win32.Mucc.ndb?

Trojan.Win32.Mucc.ndb removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X