Should I remove "Trojan:Win32/Dridex.RTH!MTB"?

The Trojan:Win32/Dridex.RTH!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Dridex.RTH!MTB virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Dridex.RTH!MTB?


File Info:
crc32: 9DE47975
md5: 96905e8602ff965a9aa7dd55a6e2d5d1
name: 96905E8602FF965A9AA7DD55A6E2D5D1.mlw
sha1: b4324e6a545374abe5c3c0a05121c4ef76a25488
sha256: d8d6e4d7529c3a2bd798b3a345d04f3bf208df32ae4d056adcf43a219cdd21fc
sha512: c637586eeafb608c693ad0108fc0ca0837163512dd531db54bc4d264596763fe65f4c7cd12729b2209ec139dd45bdbcd000536ea30b5f51b145f8758b40dd8cb
ssdeep: 3072:OWpY/Syz2ita3Un6oaxewXvR2GNYHj8z+7/VczU9vh46WIOY4zmo3zAGW+r:OWpY/S8Z83VewfR2GyxVcA5hvjRCmik
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2018
InternalName: r2thla
FileVersion: 6.5.0000.00
Full Version: 6.5.0_000-b00
CompanyName: Oracle Corporation
ProductName: Rtth(AE) Tefhwqho GZ 8
ProductVersion: 6.5.0000.00
FileDescription: Java(TM) Platform SE binary
OriginalFilename: r2thla.dll
Translation: 0x0000 0x04b0

Trojan:Win32/Dridex.RTH!MTB also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Dridex.776
ClamAV	Win.Malware.Trojanx-9863334-0
McAfee	Artemis!96905E8602FF
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Dridex.3a1ed36d
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Emotet.BCM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HKYX
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Yakes
BitDefender	Trojan.GenericKD.36930209
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Trojan.GenericKD.36930209
Ad-Aware	Trojan.GenericKD.36930209
Sophos	Mal/Generic-S + Mal/EncPk-APX
Comodo	Malware@#358f7d0xh80ku
BitDefenderTheta	Gen:NN.ZedlaF.34690.ku8@aSUWewn
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Drixed.cc
FireEye	Generic.mg.96905e8602ff965a
Emsisoft	Trojan.GenericKD.36930209 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Crypt.Agent.bzmvs
eGambit	Unsafe.AI_Score_92%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Dridex.RTH!MTB
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKD.36930209
VBA32	TScope.Malware-Cryptor.SB
MAX	malware (ai score=87)
Malwarebytes	Trojan.Dridex
Panda	Trj/Genetic.gen
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan-Banker.Dridex
Fortinet	W32/EncPk.APX!tr
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml

How to remove Trojan:Win32/Dridex.RTH!MTB?

Trojan:Win32/Dridex.RTH!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan:Win32/Dridex.RTH!MTB”?