Trojan

Trojan:Win32/AveMaria.MT!MTB removal

Malware Removal

The Trojan:Win32/AveMaria.MT!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/AveMaria.MT!MTB virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/AveMaria.MT!MTB?


File Info:

crc32: 479308BD
md5: ade6651839e1dc32dca145ea6c83b676
name: ADE6651839E1DC32DCA145EA6C83B676.mlw
sha1: 5ed5769fc05b388ec911352a6a206a912004e586
sha256: 196789782f6dcb856fb75cc2f08f70fa7643ce5183ebba9b677253d86cac9b41
sha512: e3344f95be5672295a9a3a6d1cbf5c069f9cf59a009bbbdf39d0ae523b230188999af8b950c191f5fb8e94346858ff4c329390c1625890703a47f78ed5ab5d55
ssdeep: 24576:VhTP85JKIq20xIQ40TMt7zVT6lVINGgZi4:vTPAvTzVT6lKNGL4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/AveMaria.MT!MTB also known as:

ClamAVWin.Dropper.Fareit-9838080-0
FireEyeGeneric.mg.ade6651839e1dc32
Qihoo-360Win32/Backdoor.Remcos.HgIASP8A
McAfeeFareit-FZO!ADE6651839E1
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005788df1 )
BitDefenderTrojan.GenericKD.36424815
K7GWTrojan ( 005788df1 )
CyrenW32/Delf.NFBT-4126
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyHEUR:Backdoor.Win32.Remcos.gen
AlibabaTrojanDownloader:Win32/Remcos.1c08da4b
ViRobotTrojan.Win32.Z.Agent.1140744.C
MicroWorld-eScanTrojan.GenericKD.36424815
RisingBackdoor.NetWiredRC!8.2AF (CLOUD)
Ad-AwareTrojan.GenericKD.36424815
EmsisoftTrojan.GenericKD.36424815 (B)
ComodoMalware@#qupidwinf1ax
F-SecureTrojan.TR/Dldr.Delf.ukezp
DrWebTrojan.DownLoader36.59711
TrendMicroTROJ_GEN.R002C0PC121
McAfee-GW-EditionFareit-FZO!ADE6651839E1
SophosMal/Generic-S
IkarusTrojan.Inject
AviraTR/Dldr.Delf.ukezp
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:Win32/AveMaria.MT!MTB
GridinsoftTrojan.Win32.Downloader.sa
ArcabitTrojan.Generic.D22BCC6F
ZoneAlarmHEUR:Backdoor.Win32.Remcos.gen
GDataWin32.Trojan.PSE.1GRG7OG
AhnLab-V3Malware/Win32.Generic.C4350267
BitDefenderThetaGen:NN.ZelphiCO.34590.fHX@a4Y33Nki
ALYacTrojan.GenericKD.36424815
MAXmalware (ai score=84)
MalwarebytesTrojan.MalPack.DLF
PandaTrj/CI.A
ESET-NOD32Win32/TrojanDownloader.Delf.DEN
TrendMicro-HouseCallTROJ_GEN.R002C0PC121
TencentWin32.Trojan.Falsesign.Lrsg
SentinelOneStatic AI – Malicious PE
eGambitPE.Heur.InvalidSig
FortinetW32/GenKryptik.EKLE!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.fc05b3

How to remove Trojan:Win32/AveMaria.MT!MTB?

Trojan:Win32/AveMaria.MT!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment