Trojan:Win32/DarkTrack.PA!MTB removal

The Trojan:Win32/DarkTrack.PA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/DarkTrack.PA!MTB virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/DarkTrack.PA!MTB?


File Info:
crc32: 10F4711E
md5: bddd8db7b2653b2282eef20419a63042
name: BDDD8DB7B2653B2282EEF20419A63042.mlw
sha1: e9c7576c0329d48b1803f87af64b5f71f7fe7143
sha256: 88cabbf4309f6b749bc21ebd4e780d445ae427014413db0c5b752e734cfca427
sha512: 3396e51b338848893e269f224c4e9ab743acc30c8fad821d541dcd6af0639b75a8eeacc76c5ace7f528ec4a658a92613b4fd2b1edf5b2302b511669532df741b
ssdeep: 6144:APm9F/olJtOx4MUZaPvP9xTtquvYUmmBRzW9V8ONcXnNEImq7cDEO1A5wn3gBfwo:Hroo4MNfBBit6FZ7cDEO1AvUCMs4dWCW
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: MasloCrpt
FileVersion: 1.00
CompanyName:  LeoChank
ProductName: p
ProductVersion: 1.00
OriginalFilename: MasloCrpt.exe

Trojan:Win32/DarkTrack.PA!MTB also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.bddd8db7b2653b22
McAfee	Artemis!BDDD8DB7B265
Malwarebytes	Malware.AI.4078975538
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Generic-6664545-0
Kaspersky	HEUR:Trojan.Win32.Generic
Rising	Dropper.Generic!8.35E (TFE:dGZlOgUwf/Kl2smAkw)
F-Secure	Trojan.TR/Dropper.Gen
McAfee-GW-Edition	BehavesLike.Win32.Trojan.bc
Sophos	Mal/Generic-S
Ikarus	Trojan.Inject2
Avira	TR/Dropper.Gen
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/DarkTrack.PA!MTB
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZevbaF.34590.Vm3@aCy0Hroi
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Injector.ECUW
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Injector.BWXZ!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.c0329d
Qihoo-360	HEUR/QVM03.0.8B81.Malware.Gen

How to remove Trojan:Win32/DarkTrack.PA!MTB?

Trojan:Win32/DarkTrack.PA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X