Trojan

Trojan:Win32/Racealer.GA!MTB removal

Malware Removal

The Trojan:Win32/Racealer.GA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Racealer.GA!MTB virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Maori
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan:Win32/Racealer.GA!MTB?


File Info:

crc32: 0A7EE639
md5: bbfb62481454c07bb46337f054041d40
name: raccon.exe
sha1: 4abbf9fe50fbb82e7d7e38853fd45f40d6b44b92
sha256: 96157ba85bdee83ffd5fb3112345a1fc7c8f31905134496c6a500017b19663ac
sha512: b1213267be886bd6f8ac1839c1c2da4d1acc3d73b93246b71edbb07cc6e336de5eb891bb7422d5f470ad738964a3be8ecdae8cfaa20adb2fcf7ad0089c10dc78
ssdeep: 12288:B1HOoOsYZPx95iwEhHhAZ23vsgOdJca8o5VY7CYF2:S5RxviVhBAg3ycrvJ2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Racealer.GA!MTB also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanTrojan.GenericKD.33450708
FireEyeGeneric.mg.bbfb62481454c07b
McAfeeRDN/Generic.rp
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005618821 )
BitDefenderTrojan.GenericKD.33450708
K7GWTrojan ( 005618821 )
Cybereasonmalicious.e50fbb
TrendMicroTROJ_GEN.R011C0PC220
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
GDataTrojan.GenericKD.33450708
KasperskyTrojan-PSW.Win32.Racealer.dnk
AlibabaTrojanPSW:Win32/Racealer.fb62f35a
NANO-AntivirusTrojan.Win32.Racealer.hdnqnm
AegisLabTrojan.Multi.Generic.4!c
RisingTrojan.Kryptik!8.8 (CLOUD)
Endgamemalicious (high confidence)
EmsisoftTrojan.GenericKD.33450708 (B)
F-SecureTrojan.TR/AD.StellarStealer.wdbme
DrWebTrojan.PWS.Siggen2.44178
ZillyaTrojan.Racealer.Win32.458
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan.Win32.Krypt
WebrootW32.Malware.Gen
AviraTR/AD.StellarStealer.wdbme
MAXmalware (ai score=88)
Antiy-AVLTrojan/Win32.Wacatac
MicrosoftTrojan:Win32/Racealer.GA!MTB
ArcabitTrojan.Generic.D1FE6AD4
ZoneAlarmTrojan-PSW.Win32.Racealer.dnk
AhnLab-V3Trojan/Win32.MalPe.R327591
Acronissuspicious
VBA32Trojan.AntiAV
Ad-AwareTrojan.GenericKD.33450708
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HBOL
TrendMicro-HouseCallTROJ_GEN.R011C0PC220
TencentWin32.Trojan-qqpass.Qqrob.Pkhf
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_85%
FortinetPossibleThreat.MU
BitDefenderThetaGen:NN.ZexaF.34096.GuW@aati6AjG
AVGWin32:TrojanX-gen [Trj]
AvastWin32:TrojanX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.PSW.07e

How to remove Trojan:Win32/Racealer.GA!MTB?

Trojan:Win32/Racealer.GA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment