Trojan

Trojan:Win32/Ranumbot.MX!MTB removal guide

Malware Removal

The Trojan:Win32/Ranumbot.MX!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Ranumbot.MX!MTB virus can do?

  • Unconventionial language used in binary resources: Spanish (Costa Rica)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Ranumbot.MX!MTB?


File Info:

crc32: C174B02D
md5: 59ea8fc89d22dda3539a7733ba477735
name: f3_2020-05-13_13-21.exe
sha1: 86e4c4b01d1f68e02f76437f8025b9726ae8fcde
sha256: 6e4e1ca4b9bdfcb057d2205cfee2ff4c34877d561d1228d93ba6e8e18aeb8b74
sha512: 5d9165f426b0858d9f08a3923fe74e38c127942104af304783a9de56726912b3f55226e3f878673850fb48ec7dc29deafa32d77831d37261c049af733c6a45c3
ssdeep: 1536:yEnxQUYR4ovBdnOWINSAFZ0z7ypsE0aJqQOKtPAMld/JKR8Pdbl1yIwT:yXCo36FZK7ypt0Ee04g/JKR8PUpT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: mbehumza.emu
FileVersionBeer: 1.3.23.4
ProductVersions: 1.7.514
LegalCopyrighz: Copyrighz (C) 2020, jlfvjz

Trojan:Win32/Ranumbot.MX!MTB also known as:

MicroWorld-eScanTrojan.GenericKD.33838303
FireEyeGeneric.mg.59ea8fc89d22dda3
McAfeeRDN/Generic.hbg
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 0056689f1 )
BitDefenderTrojan.GenericKD.33838303
K7GWTrojan ( 0056689f1 )
CrowdStrikewin/malicious_confidence_100% (W)
TrendMicroTROJ_GEN.R04CC0DEE20
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:DropperX-gen [Drp]
GDataTrojan.GenericKD.33838303
KasperskyTrojan.Win32.Cutwail.xvj
AlibabaTrojan:Win32/Cutwail.26a1dd5d
TencentWin32.Trojan.Cutwail.Szly
Endgamemalicious (high confidence)
EmsisoftTrojan.GenericKD.33838303 (B)
ComodoMalware@#2yq4j29z1jtlg
F-SecureTrojan.TR/AD.Cutwail.arr
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.ct
MaxSecureTrojan.Malware.300983.susgen
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
IkarusTrojan.Win32.Crypt
JiangminTrojan.Cutwail.ia
AviraTR/AD.Cutwail.arr
MAXmalware (ai score=85)
Antiy-AVLTrojan/Win32.Cutwail
MicrosoftTrojan:Win32/Ranumbot.MX!MTB
ArcabitTrojan.Generic.D20454DF
ZoneAlarmTrojan.Win32.Cutwail.xvj
AhnLab-V3Trojan/Win32.MalPe.R336459
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34110.lq0@amushWP
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HDIG
TrendMicro-HouseCallTROJ_GEN.R04CC0DEE20
RisingTrojan.Kryptik!8.8 (CLOUD)
SentinelOneDFI – Suspicious PE
FortinetW32/Kryptik.HDGJ!tr
Ad-AwareTrojan.GenericKD.33838303
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.01d1f6
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.945

How to remove Trojan:Win32/Ranumbot.MX!MTB?

Trojan:Win32/Ranumbot.MX!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment