Trojan:MSIL/Rezlt.RDA!MTB information

The Trojan:MSIL/Rezlt.RDA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Rezlt.RDA!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Trojan:MSIL/Rezlt.RDA!MTB?


File Info:
name: C73386C385EECF0EFE8B.mlw
path: /opt/CAPEv2/storage/binaries/afe5135752b85c16c88f34f960469dfe28a0d6cc05ab6b66cf2e47676c087f48
crc32: FCE3BDCB
md5: c73386c385eecf0efe8b3cc5ae86ef2e
sha1: f12cd9cf1d90eaad599678039133e65885afa23c
sha256: afe5135752b85c16c88f34f960469dfe28a0d6cc05ab6b66cf2e47676c087f48
sha512: 55855bf92e81a7d7125d9e393f166fe249a9358636d425b683a06891f8de6d3cd82a9ad6aba9d0f1c1af8d4ad7aa2999bcf647f84f65c272186f4c7aab74b7c5
ssdeep: 1536:g+BALBQBF1B5BIBGqBGBpBKntuUGOY0HYErqtiAuI:TBaBQBF1B5BIBGqBGBpBKXGyI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12553132DED50D986CC54F93BC8F6B100C37921C71223972E6A6A9DBA25D772B45CE0BC
sha3_384: c497f7e71f59347e21987d79fda634f8900ecfff5e4d3a6728984f0e5290cb41f477949dc1256f3f0e18126f013c497f
ep_bytes: ff250020400000000000000000000000
timestamp: 2102-04-30 12:55:47

Version Info:
Translation: 0x0000 0x04b0
Comments: Achieve new heights with a Stunning Software built for success.
CompanyName: Apex Biotech Max
FileDescription: C0nstructivism
FileVersion: 3.6.94.88
InternalName: C0nstructivism.exe
LegalCopyright: © 1993-2023 Dynamic Monitor
LegalTrademarks: Dynamic Monitor ℠
OriginalFilename: C0nstructivism.exe
ProductName: Dynamic Monitor
ProductVersion: 3.6.94.88
Assembly Version: 3.6.94.88

Trojan:MSIL/Rezlt.RDA!MTB also known as:

tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Lazy.370632
BitDefenderTheta	Gen:NN.ZemsilF.36738.em0@auRPYxi
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.AHZ
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Lazy.370632
Emsisoft	Gen:Variant.Lazy.370632 (B)
F-Secure	Trojan.TR/Dropper.MSIL.Gen
DrWeb	Trojan.DownLoaderNET.702
VIPRE	Gen:Variant.Lazy.370632
FireEye	Generic.mg.c73386c385eecf0e
GData	Gen:Variant.Lazy.370632
Avira	TR/Dropper.MSIL.Gen
Kingsoft	malware.kb.c.991
Arcabit	Trojan.Lazy.D5A7C8
Microsoft	Trojan:MSIL/Rezlt.RDA!MTB
ALYac	Gen:Variant.Lazy.370632
MAX	malware (ai score=83)
Cylance	unsafe
Rising	Malware.Obfus/MSIL@AI.82 (RDM.MSIL2:lw3VyGGo8XyYMY5WxIhvVQ)
SentinelOne	Static AI – Malicious PE
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan:MSIL/Rezlt.RDA!MTB?

Trojan:MSIL/Rezlt.RDA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X