Trojan

About “Trojan:Win32/Glupteba.MT!MTB” infection

Malware Removal

The Trojan:Win32/Glupteba.MT!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Glupteba.MT!MTB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/Glupteba.MT!MTB?


File Info:

crc32: 944A3017
md5: a1d2927e14cf1bc2029342991b24af64
name: A1D2927E14CF1BC2029342991B24AF64.mlw
sha1: b9e77ed028e0cfa3323bf2c7ed5c78ef01ba7aa1
sha256: 38198c30b49b1b950df51a2b995576928ea01a649416cd9f42ae742ae1bbb8e6
sha512: 2bf9f7b089c240b9c21b57f421279a077d72a2d91dfd7b7b13e3dd184f1192b7430108d54a863368da471a069d54d7c96cb4545bc4f5217022b04afcc66abdc1
ssdeep: 24576:InY1M3kl4vUhbPf9ZtPCcUly74Ca/ZSC77Lv+f6T8E:IIM3e4vIPf9Z/eynghbD
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Glupteba.MT!MTB also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.773164
FireEyeGeneric.mg.a1d2927e14cf1bc2
ALYacGen:Variant.Razy.773164
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderGen:Variant.Razy.773164
BitDefenderThetaGen:NN.ZexaF.34634.@GZ@ayj0wNo
CyrenW32/Kryptik.CKB.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Packed.Razy-9785185-0
KasperskyUDS:DangerousObject.Multi.Generic
NANO-AntivirusTrojan.Win32.Agent.htpbrg
TencentTrojan.Win32.Kryptik.gifya
Ad-AwareGen:Variant.Razy.773164
SophosTroj/Agent-BFEY
ComodoTrojWare.Win32.Kryptik.TLS@812zm8
DrWebTrojan.DownLoader35.18428
ZillyaTrojan.Generic.Win32.661494
InvinceaML/PE-A + Troj/Agent-BFEY
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
EmsisoftGen:Variant.Razy.773164 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.fsiuy
eGambitUnsafe.AI_Score_99%
MAXmalware (ai score=83)
Antiy-AVLHackTool[VirTool]/Win32.Ceeinject
KingsoftWin32.Heur.KVMH008.a.(kcloud)
MicrosoftTrojan:Win32/Glupteba.MT!MTB
GridinsoftTrojan.Heur!.03212521
ArcabitTrojan.Razy.DBCC2C
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataWin32.Trojan.PSE.1IO31Z5
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Glupteba.R355209
Acronissuspicious
McAfeePacked-FJB!A1D2927E14CF
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.GIRH
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
IkarusTrojan-Downloader.Win32.FakeAlert
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.028e0c
Qihoo-360HEUR/QVM19.1.58D1.Malware.Gen

How to remove Trojan:Win32/Glupteba.MT!MTB?

Trojan:Win32/Glupteba.MT!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment