Should I remove “Trojan:Win32/Redline.ASBG!MTB”?

The Trojan:Win32/Redline.ASBG!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Redline.ASBG!MTB virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the RedLine malware family
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Redline.ASBG!MTB?


File Info:
name: 0629E92D916D7310C80A.mlw
path: /opt/CAPEv2/storage/binaries/a05d785c04bec88bb68f6d01375867d81644ce524fcb8a9a95b823758f01a8af
crc32: 0C5E2931
md5: 0629e92d916d7310c80a43981d03e6fe
sha1: fc4fab4460f0c0471762d9ca33c052f896504960
sha256: a05d785c04bec88bb68f6d01375867d81644ce524fcb8a9a95b823758f01a8af
sha512: 6d19af2752c5c7e7ab7e0aa91844cfdea8f7f392f9684237e5f01e344af78613b4b9c4a10fe8718ecce72b69b110a63bb3244fad3a0f68357c254c9305aab3bd
ssdeep: 12288:fC9oudYAEg29AzB87kHCYbAVnReEbUjHpkpuWSeNJQ4peapdy87Cr2KK:flKYM29Ad87kHCwWRewu0dym
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EF259E1139C08075EEF320B7A6EDBA6E42EDD864075916DF06DC5BEED7606C13E32682
sha3_384: 85721219851766f9f7d49f5b5611729913740f9357b584bff6ef1ed9b6b53b33d72f21eb9a159a2f799000164ce089e0
ep_bytes: e9d40a0400e97c790500e945910400e9
timestamp: 2023-10-28 10:25:18

Version Info:
0: [No Data]

Trojan:Win32/Redline.ASBG!MTB also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Trojan.GenericKDZ.103861
FireEye	Trojan.GenericKDZ.103861
Skyhigh	BehavesLike.Win32.Generic.th
McAfee	GenericRXAA-AA!0629E92D916D
Malwarebytes	Trojan.MalPack.RND
BitDefender	Trojan.GenericKDZ.103861
CrowdStrike	win/malicious_confidence_70% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HUYH
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Pwsx-10012424-0
Kaspersky	HEUR:Backdoor.Win32.Mokes.gen
NANO-Antivirus	Trojan.Win32.Injuke.kcvpbg
Rising	Backdoor.Convagent!8.123DC (TFE:1:yKg2Il94czN)
F-Secure	Trojan.TR/AD.RedLineSteal.atbul
VIPRE	Trojan.GenericKDZ.103861
Emsisoft	Trojan.GenericKDZ.103861 (B)
Ikarus	Trojan.Win32.Agent
Varist	W32/Kryptik.KNN.gen!Eldorado
Avira	TR/AD.RedLineSteal.atbul
Antiy-AVL	Trojan/Win32.Kryptik
Microsoft	Trojan:Win32/Redline.ASBG!MTB
Arcabit	Trojan.Generic.D195B5
ZoneAlarm	HEUR:Backdoor.Win32.Mokes.gen
GData	Trojan.GenericKDZ.103861
Google	Detected
BitDefenderTheta	Gen:NN.ZexaF.36792.aDW@aKPzkTh
ALYac	Trojan.GenericKDZ.103861
MAX	malware (ai score=81)
DeepInstinct	MALICIOUS
VBA32	Backdoor.Mokes
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Kryptik.HUYH!tr
AVG	Win32:PWSX-gen [Trj]
Avast	Win32:PWSX-gen [Trj]

How to remove Trojan:Win32/Redline.ASBG!MTB?

Trojan:Win32/Redline.ASBG!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X