How to remove “Trojan:Win32/ICLoader.JL!MTB”?

The Trojan:Win32/ICLoader.JL!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/ICLoader.JL!MTB virus can do?

Performs HTTP requests potentially not found in PCAP.
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Trojan:Win32/ICLoader.JL!MTB?


File Info:
name: 2214993495964B366246.mlw
path: /opt/CAPEv2/storage/binaries/c0d7faad8a7418f082c460a4a26b92bf53288e67f133abf91ef4b86f0aeaf274
crc32: 1AE5EFB8
md5: 2214993495964b3662464c72dc5a1125
sha1: 98156b84395e74362dd8887ef6fa4d7995019f25
sha256: c0d7faad8a7418f082c460a4a26b92bf53288e67f133abf91ef4b86f0aeaf274
sha512: 83df629828726b797b78b92ea1d72dafbe4dde618823974fa53faced4a9273ac6e0b9d7ec5b8ce9312b96d246cfcbb1ab203eecfc0fbda8df3a9e81667df3583
ssdeep: 6144:XtzzaGZn3o3aS4hgsQURTSTou+e0+WMv97f8qKAOJ+ujcw:XtzzLx43aS4hgZURTcJjK5cw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8447D107591C432E87211365978EBB6853EFC350B258ADBB3C41F7EDE703C29A35A6A
sha3_384: d7cc38fdb30ca88574cbf657d165dc48ce46b5b2af5fb183b5b08083d89c30a3b40ae3b79d8e28c54eb33abce03cf023
ep_bytes: e8bb050000e97afeffff8b4df464890d
timestamp: 2023-04-05 12:01:45

Version Info:
0: [No Data]

Trojan:Win32/ICLoader.JL!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Tepfer.4!c
MicroWorld-eScan	Gen:Variant.Lazy.151789
ALYac	Gen:Variant.Lazy.151789
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 005480a41 )
K7GW	Trojan-Downloader ( 005480a41 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Agent.EPA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.ELB
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.Win32.Tepfer.vho
Alibaba	TrojanPSW:Win32/ICLoader.a4a34c31
NANO-Antivirus	Trojan.Win32.Tepfer.jvxixj
Tencent	Malware.Win32.Gencirc.10bef316
Emsisoft	Gen:Variant.Lazy.151789 (B)
DrWeb	Trojan.DownLoader45.59144
Zillya	Downloader.Agent.Win32.512928
McAfee-GW-Edition	BehavesLike.Win32.Downloader.dh
Sophos	Mal/Generic-S
Avira	HEUR/AGEN.1317771
Antiy-AVL	Trojan[PSW]/Win32.Tepfer
Arcabit	Trojan.Lazy.D250ED
ViRobot	Trojan.Win.Z.Agent.257536.W
ZoneAlarm	HEUR:Trojan-PSW.Win32.Tepfer.vho
Microsoft	Trojan:Win32/ICLoader.JL!MTB
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R568717
McAfee	GenericRXUO-TZ!221499349596
VBA32	BScope.Trojan.Downloader
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Stealer.Tepfer!8.13357 (TFE:5:89VrmvP5OHL)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.74683558.susgen
Fortinet	W32/Agent.ELB!tr.dldr
AVG	Win32:DropperX-gen [Drp]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/ICLoader.JL!MTB?

Trojan:Win32/ICLoader.JL!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X