Trojan

What is “Trojan:Win32/Bsymem.DEC!MTB”?

Malware Removal

The Trojan:Win32/Bsymem.DEC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Bsymem.DEC!MTB virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Anomalous binary characteristics

How to determine Trojan:Win32/Bsymem.DEC!MTB?



File Info:

crc32: B7ED23A5
md5: 5d898adf12890251a1868e0fd0f3ec90
name: 5D898ADF12890251A1868E0FD0F3EC90.mlw
sha1: b5c9fef710117270314074765d5ce9798480bfc2
sha256: 1cffb06b071c3fe1212d60344960b3b1d601ac487bb2aa35af9655ff9311f1d0
sha512: be8a04cb658cc32e47e50ec66fc52edd4f30ff21dfe2af81835797b05365300ec522e3ae9ee57a0058e4350aa75ba7f0a7f2dfa5faa185ab5e30f43d1f2bee46
ssdeep: 6144:CPVJEQxo2mkaQVUUpCLPrOffylHOwYpd8pJ7XZqvf9V14UKQ0Xae8mzSZ/gYw03J:CrrgHKylHOGUXKQ8a3muZ/gYoBWo3m
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

Translation: 0x0409 0x04b0
InternalName: Graph
FileVersion: 1.00
CompanyName: Xansa
Comments: By Rajneesh Noonia
ProductName: Flow Chart Designer
ProductVersion: 1.00
OriginalFilename: Graph.exe

Trojan:Win32/Bsymem.DEC!MTB also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
DrWebTrojan.Packed.140
MicroWorld-eScanGen:Variant.Johnnie.256973
ALYacGen:Variant.Johnnie.256973
VIPRETrojan.Win32.Generic!BT
BitDefenderGen:Variant.Johnnie.256973
BitDefenderThetaGen:NN.ZevbaF.34634.Nm0@aG0!dIcO
CyrenW32/VBInject.AEH.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Bsymem.rim
Ad-AwareGen:Variant.Johnnie.256973
TACHYONTrojan/W32.VB-Bsymem.638976
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1134970
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Emotet.jh
FireEyeGeneric.mg.5d898adf12890251
EmsisoftGen:Variant.Johnnie.256973 (B)
IkarusTrojan.Win32.Krypt
JiangminTrojan.Bsymem.aav
MaxSecureTrojan.Malware.102778529.susgen
AviraHEUR/AGEN.1134970
Antiy-AVLTrojan/Win32.Bsymem
MicrosoftTrojan:Win32/Bsymem.DEC!MTB
ArcabitTrojan.Johnnie.D3EBCD
SUPERAntiSpywareTrojan.Agent/Gen-Emotet
ZoneAlarmTrojan.Win32.Bsymem.rim
GDataGen:Variant.Johnnie.256973
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Emotet.R342942
McAfeeTrickbot-FSNZ!5D898ADF1289
MAXmalware (ai score=85)
VBA32TScope.Trojan.VB
MalwarebytesTrojan.Injector
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Injector.EMLX
RisingTrojan.Injector!8.C4 (TFE:4:KGTpqvhHo9C)
YandexTrojan.Injector!fRmMkEBU93A
FortinetW32/Injector.EMLX!tr
WebrootW32.Trojan.Gen
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan:Win32/Bsymem.DEC!MTB?

Trojan:Win32/Bsymem.DEC!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment