Trojan

Trojan:Win32/Matanbuch.PA!MTB removal

Malware Removal

The Trojan:Win32/Matanbuch.PA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Matanbuch.PA!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine Trojan:Win32/Matanbuch.PA!MTB?


File Info:

name: 4E0CA1C67001F91E9E83.mlw
path: /opt/CAPEv2/storage/binaries/46ddd5f8d70d53df471747001d37f1eb2dbaa2a6c93ac616f7ade25a1914238a
crc32: CF2C1B3A
md5: 4e0ca1c67001f91e9e83de694cffa799
sha1: c0390a9e4c39517e311db63b130548e1c6cfcccc
sha256: 46ddd5f8d70d53df471747001d37f1eb2dbaa2a6c93ac616f7ade25a1914238a
sha512: 818ec31d10c3af34a1eb9b4214022dd30d447f485663931fc47bd8a079722d6b2fef36c64c4595ceee5dbe3627497f599f4e1cfc9676dac1cb46ffcff249770a
ssdeep: 12288:yJWkShUg2QiG0yq8w6G9nwAJFQLtcUzG9MAumQrAIBkJJf8F14xL59:WWB6VQHNGHYIiVmmuAT4D9
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1F8F41749F943EA2CD48B41387546FBB6EC7CB13076389877BBC01BA77960795C962A03
sha3_384: 87afe027e5476da5ae1ffe4bbc6ce44013ac8274b3d1b3e075dcf2cd7124e480f91933a39c6bf946a0797def40dbd982
ep_bytes: 558bec837d0c017505e8b2030000ff75
timestamp: 2024-02-16 22:34:50

Version Info:

0: [No Data]

Trojan:Win32/Matanbuch.PA!MTB also known as:

BkavW32.Common.8D93DC96
AVGWin32:DropperX-gen [Drp]
MicroWorld-eScanGen:Variant.Fragtor.515500
FireEyeGeneric.mg.4e0ca1c67001f91e
SkyhighRDN/Generic Dropper
McAfeeRDN/Generic Dropper
VIPREGen:Variant.Fragtor.515500
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:Win32/Matanbuch.e70b9d32
K7GWRiskware ( 00584baa1 )
K7AntiVirusRiskware ( 00584baa1 )
SymantecML.Attribute.HighConfidence
ElasticWindows.Trojan.Matanbuchus
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.HOR
CynetMalicious (score: 100)
APEXMalicious
AvastWin32:DropperX-gen [Drp]
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Fragtor.515500
TencentWin32.Trojan-Downloader.Oader.Anhl
EmsisoftGen:Variant.Fragtor.515500 (B)
F-SecureTrojan.TR/Redcap.rcpky
TrendMicroTrojan.Win32.MATANBUCHUS.YXEDLZ
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusTrojan.SuspectCRC
VaristW32/ABRisk.ASYL-7411
AviraTR/Redcap.rcpky
Antiy-AVLTrojan/Win32.Agent
KingsoftWin32.Troj.Unknown.a
MicrosoftTrojan:Win32/Matanbuch.PA!MTB
ArcabitTrojan.Fragtor.D7DDAC
ViRobotTrojan.Win.Z.Fragtor.729088
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataGen:Variant.Fragtor.515500
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C5602229
ALYacGen:Variant.Fragtor.515500
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.Win32.MATANBUCHUS.YXEDLZ
RisingTrojan.ShellCodeLoader!1.F9AF (CLASSIC)
YandexTrojan.Agent!kKo/GjtzYks
MAXmalware (ai score=87)
FortinetW32/PossibleThreat
DeepInstinctMALICIOUS
alibabacloudTrojan[downloader]:Win/Matanbuch.PA!MTB

How to remove Trojan:Win32/Matanbuch.PA!MTB?

Trojan:Win32/Matanbuch.PA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment