How to remove “Trojan:Win32/Dridex.PR!MTB”?

The Trojan:Win32/Dridex.PR!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Dridex.PR!MTB virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Collects information about installed applications

How to determine Trojan:Win32/Dridex.PR!MTB?


File Info:
crc32: C7986AF3
md5: 8b97d65cedea9d6c6d919b91e94cb59d
name: 8B97D65CEDEA9D6C6D919B91E94CB59D.mlw
sha1: 1e4ace6517f6b2e8ac26fbe34afeacde55834779
sha256: cf1777f90550213504c86209332acb38eb5b80a5c6db67816e6a8b87dd22b119
sha512: 23420441bd4b00b3d433058face4783ff99b79ceda8aef2c2403f3b88fe9311c62627198c1a9d5ea8374c3575fa25fa486cfc8c29f8175280331cdedda7aa1ad
ssdeep: 12288:rYSRzYd+T4RrhYZ1TBWHiCnRQy0F6ShnU1Z5KqlBXI8JqjaD4x/1v:k7d+T4RrijcHigQ3k6sb8jw4b
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2012 Temperature Corporation. All rights reserved
InternalName: Least.dll
FileVersion: 4.8.8.438
CompanyName: Temperature
Hunt: 203
ProductVersion: 4.8.8.438
FileDescription: Tube believe
OriginalFilename: Least.dll
Translation: 0x0409 0x04b0

Trojan:Win32/Dridex.PR!MTB also known as:

Cynet	Malicious (score: 90)
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 005793a41 )
K7AntiVirus	Trojan ( 005793a41 )
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Kryptik.HJYN
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
BitDefender	Trojan.GenericKD.36510053
MicroWorld-eScan	Trojan.GenericKD.36510053
Ad-Aware	Trojan.GenericKD.36510053
Comodo	Malware@#27hmz8mncmrzz
TrendMicro	Backdoor.Win32.ZLOADER.THCAEBA
McAfee-GW-Edition	RDN/Dridex
FireEye	Generic.mg.8b97d65cedea9d6c
Emsisoft	Trojan.GenericKD.36510053 (B)
Webroot	W32.Trojan.Gen
Avira	TR/AD.Dridex.dfbad
Microsoft	Trojan:Win32/Dridex.PR!MTB
Arcabit	Trojan.Generic.D22D1965
GData	Trojan.GenericKD.36510053
McAfee	RDN/Dridex
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Backdoor.Win32.ZLOADER.THCAEBA
Rising	Malware.Heuristic!ET#79% (RDMK:cmRtazr3sYpRQXFdoRUZco/voT7t)
Ikarus	Trojan.SuspectCRC
Fortinet	W32/ZLoader.XJHG!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml

How to remove Trojan:Win32/Dridex.PR!MTB?

Trojan:Win32/Dridex.PR!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X