Trojan

How to remove “Trojan:Win32/RedLine.AB!MSR”?

Malware Removal

The Trojan:Win32/RedLine.AB!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/RedLine.AB!MSR virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/RedLine.AB!MSR?


File Info:

crc32: 96C8499F
md5: 6e308e1136100bf49c120e9b0710b5a7
name: 6E308E1136100BF49C120E9B0710B5A7.mlw
sha1: 745ebc5c3c248631a1f4251265e3357700ffd0c1
sha256: 5862f38c79bc816b3158d8171a1f54c156a4f0565d4b98a1ea5399c92b732464
sha512: 54ce558131fb89965d627ed9def5d023d79305eb0f8441cab8c47470ddfaa84e9aa2dbcdb9a97207614620e8f2e7e7efde4d10e42aca954ac8367dac6f782000
ssdeep: 24576:FqWt9RgxJS8ssybCZ+w2Y9G7DZWpR4sDzk4OJOhgXqIiW8qNL61JCUWlbubi1DVa:zxkyWhWAeCARvXqIiFqfUw8iBs
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: xa9 Zoom Video Communications, Inc. All rights reserved.
InternalName: Zoom Meetings Installer
FileVersion: 5,6,0,0
CompanyName: Zoom Video Communications, Inc.
LegalTrademarks: Zoom Meetings Installer
Comments: Zoom Meetings Installer
ProductName: Zoom Meetings Installer
ProductVersion: 5,6,0,0
FileDescription: Zoom Meetings Installer
OriginalFilename: Zoom Meetings Installer
Translation: 0x0409 0x04e4

Trojan:Win32/RedLine.AB!MSR also known as:

K7AntiVirusTrojan ( 0057df2d1 )
CrowdStrikewin/malicious_confidence_70% (W)
K7GWTrojan ( 0057df2d1 )
APEXMalicious
KasperskyUDS:Trojan-PSW.MSIL.Reline.gen
SophosMal/Generic-S
McAfee-GW-EditionArtemis!Trojan
eGambitPE.Heur.InvalidSig
MicrosoftTrojan:Win32/RedLine.AB!MSR
McAfeeArtemis!6E308E113610
VBA32CIL.StupidPInvoker-1.Heur
Paloaltogeneric.ml

How to remove Trojan:Win32/RedLine.AB!MSR?

Trojan:Win32/RedLine.AB!MSR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment