Trojan

What is “Trojan:Win32/GuLoader.PKA!MTB”?

Malware Removal

The Trojan:Win32/GuLoader.PKA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/GuLoader.PKA!MTB virus can do?

  • Executable code extraction
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/GuLoader.PKA!MTB?


File Info:

crc32: B1100848
md5: ac13bf4ff710d12374b1871362dbe245
name: AC13BF4FF710D12374B1871362DBE245.mlw
sha1: 6ce41d7630bfd15e67c65435a717c420dab59a3c
sha256: dde688c8b175450855cf4f876454d4de11aae8be3671fb94bb9c07fc8ea35e53
sha512: b687301e96e228f27c84ebd38837a1448c4b626e6793abc809bbc107b1f2d3e2147a5c9c6681a96549ceab44772528b29d5465255cb2a46436e0060a33ecb744
ssdeep: 768:lSBRD7TrYkc7T9DNnBpu/LOt/95jwmmmmmmRR3GjKZEfI+TvbxEAyMPw7rQAAC1:IByBuLOP5ju1GjwEfI0vybYrdAl3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: stenstormens
FileVersion: 1.00
CompanyName: Mast-Jxe4germeister AG
Comments: Mast-Jxe4germeister AG
ProductName: Mast-Jxe4germeister AG
ProductVersion: 1.00
OriginalFilename: stenstormens.exe

Trojan:Win32/GuLoader.PKA!MTB also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.PonyStealer.em0@WaZOYYfi
FireEyeGeneric.mg.ac13bf4ff710d123
CAT-QuickHealTrojan.Multi
McAfeePWS-FCUB!AC13BF4FF710
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 0057729d1 )
BitDefenderGen:Heur.PonyStealer.em0@WaZOYYfi
K7GWTrojan ( 0057729d1 )
CyrenW32/Kryptik.DCA.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Mucc.mqz
AlibabaTrojan:Win32/GuLoader.87d8bafb
AegisLabTrojan.Multi.Generic.4!c
RisingTrojan.Injector!8.C4 (CLOUD)
Ad-AwareGen:Heur.PonyStealer.em0@WaZOYYfi
SophosMal/Generic-S
F-SecureTrojan.TR/Dropper.VB.agetn
McAfee-GW-EditionPWS-FCUB!AC13BF4FF710
EmsisoftTrojan.Injector (A)
AviraTR/Dropper.VB.agetn
MAXmalware (ai score=89)
MicrosoftTrojan:Win32/GuLoader.PKA!MTB
ArcabitTrojan.PonyStealer.ED17593
ZoneAlarmTrojan.Win32.Mucc.mqz
GDataGen:Heur.PonyStealer.em0@WaZOYYfi
CynetMalicious (score: 85)
BitDefenderThetaGen:NN.ZevbaF.34804.em0@aaZOYYfi
MalwarebytesGeneric.Malware/Suspicious
ESET-NOD32a variant of Win32/Injector.EOJP
IkarusTrojan.Win32.Injector
FortinetW32/EOJP!tr
WebrootW32.Malware.Gen
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Mucc.HgIASOQA

How to remove Trojan:Win32/GuLoader.PKA!MTB?

Trojan:Win32/GuLoader.PKA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment