Trojan

About “Trojan:Win32/Gandcrab.JRL!MTB” infection

Malware Removal

The Trojan:Win32/Gandcrab.JRL!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Gandcrab.JRL!MTB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan:Win32/Gandcrab.JRL!MTB?


File Info:

crc32: 501840FE
md5: 1a8fc5cff0d110bc05348507a8956c1f
name: 1A8FC5CFF0D110BC05348507A8956C1F.mlw
sha1: 8e6215aeb4d4a797c97053bf03dd520739de22a6
sha256: 4db71deacedcc8ed711627ea4e988e9ca948f2b3f13dbcdccf5bc2d6e0b695a1
sha512: f96b456730e2d89e4460f904ad797eca21cab1368987ac12b0b18909b27d7fc17337ecbc98a05a0f42b683d48bdbb9e784c526c853d937873182d79251197fef
ssdeep: 6144:A7A8zWW1yiWMTj5cvvF1XWJPYgR4fb/+weRBfCa:QAVItWMTtcXFMJwgRYb/5e/fH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Gandcrab.JRL!MTB also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
ClamAVWin.Packed.Gandcrab-6552923-4
FireEyeGeneric.mg.1a8fc5cff0d110bc
CAT-QuickHealTrojan.Chapak.ZZ6
McAfeeGenericRXEI-OG!1A8FC5CFF0D1
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Chapak.4!c
SangforWin.Packed.Gandcrab-6552923-4
K7AntiVirusTrojan ( 0053305e1 )
BitDefenderTrojan.Ransom.GandCrab.Gen.2
K7GWTrojan ( 0052acc01 )
Cybereasonmalicious.ff0d11
CyrenW32/S-c8f4d3b8!Eldorado
SymantecPacked.Generic.525
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Chapak.eyyxem
ViRobotTrojan.Win32.GandCrab.Gen.A
MicroWorld-eScanTrojan.Ransom.GandCrab.Gen.2
RisingDropper.Generic!8.35E (RDMK:cmRtazrfEL3zt3RWH5D7dx7ardUK)
Ad-AwareTrojan.Ransom.GandCrab.Gen.2
SophosMal/Generic-S + Mal/Agent-AUL
ComodoTrojWare.Win32.Chapak.H@7krrfq
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Encoder.24384
ZillyaDownloader.Upatre.Win32.65701
TrendMicroRansom_GANDCRAB.SMALY-3
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
EmsisoftTrojan.Ransom.GandCrab.Gen.2 (B)
IkarusTrojan-Ransom.Sodinokibi
JiangminTrojan.Zonidel.rw
AviraTR/Dropper.Gen
MAXmalware (ai score=97)
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojan:Win32/Gandcrab.JRL!MTB
ArcabitTrojan.Ransom.GandCrab.Gen.2
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.GandCrab.N
AhnLab-V3Win-Trojan/Gandcrab.Exp
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34590.vuX@aq4U!afi
ALYacTrojan.Ransom.GandCrab.Gen.2
TACHYONTrojan/W32.Chapak.345096
VBA32BScope.Backdoor.IRC.Bot
MalwarebytesTrojan.MalPack.GS
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.GEPI
TrendMicro-HouseCallRansom_GANDCRAB.SMALY-3
TencentMalware.Win32.Gencirc.10b49115
YandexTrojan.Chapak!NEySHPnUb3Y
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.DQHN!tr
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.313

How to remove Trojan:Win32/Gandcrab.JRL!MTB?

Trojan:Win32/Gandcrab.JRL!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment