Trojan:Win32/Meterpreter.RPZ!MTB information

The Trojan:Win32/Meterpreter.RPZ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Meterpreter.RPZ!MTB virus can do?

Authenticode signature is invalid

How to determine Trojan:Win32/Meterpreter.RPZ!MTB?


File Info:
name: 02B94901B8FC2408485D.mlw
path: /opt/CAPEv2/storage/binaries/6b088684f48bc251ebca97d38e64a3f6850da047eb6f5446cc885ea2fb652a3e
crc32: 8CA806C2
md5: 02b94901b8fc2408485dabaace0ffb45
sha1: a40c1c60b0455860d3d712d6ef397b04950bf900
sha256: 6b088684f48bc251ebca97d38e64a3f6850da047eb6f5446cc885ea2fb652a3e
sha512: 290df3bd7d285c5bf9a250c78350f940b2fc629887fcdeab70375388fd17a32cbd919e6c1f23b310454ab0127228a59431a548f83506f357861d36d1603fdf21
ssdeep: 384:ULUyiK9JpxTZ/YqiPlvD52NLI4+4GsLYcDRRm2IeZYf:UwyvhZ/YqCvVMI4+VslDRRm2lZY
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F792FA0AF60246F1D833A2B141DBD73FF731B61545221D5BBE5B0A18B23EB216D3A627
sha3_384: bddd458e71b376b6eaf6be898fe9284389dddd0084794cdd485910f9dad3d0465b8a507b33a9d40d33367d8198c92d26
ep_bytes: 5589e583ec18c745f4ff000000c70564
timestamp: 2024-01-17 22:19:51

Version Info:
0: [No Data]

Trojan:Win32/Meterpreter.RPZ!MTB also known as:

Bkav	W32.Common.D0F24CAC
Lionic	Trojan.Win32.ShellCode.4!c
MicroWorld-eScan	DeepScan:Generic.ShellCode.Marte.3.43957345
ClamAV	Win.Exploit.Marte-10019154-0
FireEye	DeepScan:Generic.ShellCode.Marte.3.43957345
Skyhigh	RDN/Generic.dx
McAfee	RDN/Generic.dx
Cylance	unsafe
Sangfor	Trojan.Win32.Meterpreter.Vpou
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Meterpreter.061670cf
K7GW	Riskware ( 00584baa1 )
K7AntiVirus	Riskware ( 00584baa1 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Rozena_AGen.EH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Khalesi.pef
BitDefender	DeepScan:Generic.ShellCode.Marte.3.43957345
NANO-Antivirus	Trojan.Win32.RozenaAGen.khrvia
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13fe364f
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Rozena_AGen.emtns
VIPRE	DeepScan:Generic.ShellCode.Marte.3.43957345
TrendMicro	Backdoor.Win32.SWRORT.YXEATZ
Emsisoft	DeepScan:Generic.ShellCode.Marte.3.43957345 (B)
GData	Win32.Trojan.PSE.1GHPCNM
Google	Detected
Avira	TR/Rozena_AGen.emtns
Antiy-AVL	Trojan/Win32.Shella
Arcabit	DeepScan:Generic.ShellCode.Marte.3.43957345
ZoneAlarm	HEUR:Trojan.Win32.Khalesi.pef
Microsoft	Trojan:Win32/Meterpreter.RPZ!MTB
Varist	W32/Rozena.HV.gen!Eldorado
AhnLab-V3	Trojan/Win.Meterpreter.R631919
VBA32	BScope.Trojan.Meterpreter
ALYac	DeepScan:Generic.ShellCode.Marte.3.43957345
MAX	malware (ai score=89)
Malwarebytes	Trojan.ShellCode
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Backdoor.Win32.SWRORT.YXEATZ
Rising	Trojan.Meterpreter!8.E532 (TFE:5:jCyn4DjmY1)
Ikarus	Trojan.Win32.Swrort
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/Rozena.AZP!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Meterpreter.RPZ!MTB?

Trojan:Win32/Meterpreter.RPZ!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X