How to remove “Trojan.Win32.Mucc.rzh”?

The Trojan.Win32.Mucc.rzh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Mucc.rzh virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Chinese (Traditional)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Mucc.rzh?


File Info:
crc32: CD7A7BA4
md5: cd65994e4f53363527e3651759103759
name: CD65994E4F53363527E3651759103759.mlw
sha1: 241dda06961d323299c19c1f558168864867169e
sha256: 634115d5eb91226011678443a96617cb0bcc1831621b418a0e16860b79502de7
sha512: 077473c0b90b1f41f2775a144909ca6c4edd1c1a03df92ece1de2637124d5e3ed903bb6073e81e486906fe2b00b472f2da75e40d5ddcfebe2dfd016d3d2d1583
ssdeep: 768:L/nxsMCmcp1FaKWg49kg8cf3hVFwal+HZL+J0d937yH38o5pjZ4vLJTX8HjlF8u:znxUH49NNf3hMDkeyX8qpjZc9oX8M
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0404 0x04b0
InternalName: MESALLIANCER
FileVersion: 1.00
CompanyName: Seismic
ProductName: HULKORTSOPERATRS
ProductVersion: 1.00
OriginalFilename: MESALLIANCER.exe

Trojan.Win32.Mucc.rzh also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Mucc.4!c
Elastic	malicious (high confidence)
ALYac	Trojan.Agent.GuLoader
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanDownloader:Win32/Nekark.5879b228
K7GW	Trojan-Downloader ( 005661971 )
K7AntiVirus	Trojan-Downloader ( 005661971 )
Symantec	Trojan Horse
ESET-NOD32	Win32/TrojanDownloader.Agent.FCS
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Mucc.rzh
BitDefender	Trojan.GenericKD.37664003
ViRobot	Trojan.Win32.Z.Agent.94208.GGA
MicroWorld-eScan	Trojan.GenericKD.37664003
Tencent	Win32.Trojan.Mucc.Taor
Ad-Aware	Trojan.GenericKD.37664003
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Agent.ewqik@0
BitDefenderTheta	Gen:NN.ZevbaF.34170.fm0@amPJO!hb
McAfee-GW-Edition	BehavesLike.Win32.Fareit.nm
FireEye	Generic.mg.cd65994e4f533635
Emsisoft	Trojan.GenericKD.37664003 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Kingsoft	Win32.Troj.Mucc.r.(kcloud)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Generic.D23EB503
ZoneAlarm	Trojan.Win32.Mucc.rzh
GData	Trojan.GenericKD.37664003
AhnLab-V3	Trojan/Win.Generic.C4656719
McAfee	RDN/Generic Downloader.x
MAX	malware (ai score=88)
Malwarebytes	Trojan.GuLoader
Panda	Trj/GdSda.A
Rising	Trojan.Injector!1.B459 (CLASSIC)
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/Agent.FCS!tr.dldr
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Trojan.Win32.Mucc.rzh?

Trojan.Win32.Mucc.rzh removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X