Categories: Trojan

Trojan:Win32/Glupteba.DHJ!MTB removal tips

The Trojan:Win32/Glupteba.DHJ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Glupteba.DHJ!MTB virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Presents an Authenticode digital signature
Creates RWX memory
A process created a hidden window
Unconventionial language used in binary resources: Sindhi
Executed a process and injected code into it, probably while unpacking
Anomalous binary characteristics

How to determine Trojan:Win32/Glupteba.DHJ!MTB?


File Info:
crc32: BE3C9DF5md5: f31327e4f66b5b078a04d012fb8f1494name: updater.exesha1: 1bf7e5f219d9dafaa88369c1a4cc6888aadbeab5sha256: a30e437a2eae015f806259fbee3ff13bb1921ac297cc31eada148d23b2eed700sha512: df02a4619b3dbf71065b1fbf50c681c67be58dab3d9a57c7be280ba23b69e10852c54b07e8017dc969913c9d24d24910ad13be975d1f65c31679ab1277fbfad7ssdeep: 3072:rmVwSejTWN4w0bHMycgOWlPCC7VoXw+YenSxwloUVNLYO5KYsPrQxbGwUdDbE:KWS+jw0bpNVoA+KxwvLYCozAodPEtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan:Win32/Glupteba.DHJ!MTB also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	Gen:Variant.Babar.18364
FireEye	Generic.mg.f31327e4f66b5b07
Qihoo-360	Win32/Trojan.9ad
McAfee	Artemis!F31327E4F66B
Cylance	Unsafe
BitDefender	Gen:Variant.Babar.18364
APEX	Malicious
Avast	Win32:DangerousSig [Trj]
ClamAV	Win.Malware.Glupteba-7545658-1
GData	Gen:Variant.Babar.18364
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/Glupteba.0f0875f1
Rising	Trojan.Kryptik!1.C219 (CLOUD)
Ad-Aware	Gen:Variant.Babar.18364
Emsisoft	MalCert.D (A)
F-Secure	Heuristic.HEUR/AGEN.1046174
Invincea	heuristic
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
Ikarus	Trojan.Win32.Crypt
Avira	HEUR/AGEN.1046174
Endgame	malicious (high confidence)
Arcabit	Trojan.Babar.D47BC
SUPERAntiSpyware	Trojan.Agent/Gen-DownloaderDeyma
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Glupteba.DHJ!MTB
AhnLab-V3	Win-Trojan/Suspig9.Exp
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34090.puX@a8u1T0nG
ALYac	Gen:Variant.Babar.18364
MAX	malware (ai score=85)
VBA32	TrojanPSW.Azorult
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HAJC
Tencent	Win32.Trojan.Falsesign.Dzst
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Kryptik.HAJB!tr
AVG	Win32:DangerousSig [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)