Trojan:Win32/Redline.AX!MTB removal

The Trojan:Win32/Redline.AX!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Redline.AX!MTB virus can do?

Authenticode signature is invalid

How to determine Trojan:Win32/Redline.AX!MTB?


File Info:
name: D260FDCD940B0DA8C5E4.mlw
path: /opt/CAPEv2/storage/binaries/8fd41620213dc85bf8aa27800733d6e084c9d5675c27168d4c5819ae3335606d
crc32: FBF678A7
md5: d260fdcd940b0da8c5e4c819b22b9335
sha1: 1a7deb6163948b04aaf7bfe9f637e0f91495b3ac
sha256: 8fd41620213dc85bf8aa27800733d6e084c9d5675c27168d4c5819ae3335606d
sha512: a965084a41f4f41655b24957e8c6fc65abf931b5474f0277655bc7278f894ff12e3528a6962e165f47f1e73e32e9ab5c5337e56fd9e4d8c35e75133364c18930
ssdeep: 24576:4O1E0Ow57QTJEKS52XAh8v5lcmoZSFcnBEf9DjXy:rpRswGH9y
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E415BE3969ADC26BCB51203C5D20DA778A9F3AF41A205087B3D6DE7D4F371A0416DF2A
sha3_384: 5363e3629662795496825f64be5f742465c08db3e159c5fce7be8e2f04dc58f615fe41729881b6c810ccd7963bbea6c4
ep_bytes: e8be050000e974feffff558bec8b4508
timestamp: 2022-08-07 10:20:31

Version Info:
0: [No Data]

Trojan:Win32/Redline.AX!MTB also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.435149
Malwarebytes	Generic.Malware.AI.DDS
Cyren	W32/Kryptik.HFI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HQKA
TrendMicro-HouseCall	TROJ_GEN.R014C0DHN23
Kaspersky	HEUR:Trojan.Win32.Packed.gen
BitDefender	Gen:Variant.Zusy.435149
NANO-Antivirus	Trojan.Win32.Stealer.jytegm
Avast	Win32:DropperX-gen [Drp]
Sophos	Troj/Steal-CXA
F-Secure	Heuristic.HEUR/AGEN.1317613
DrWeb	Trojan.PWS.Stealer.32832
TrendMicro	TROJ_GEN.R014C0DHN23
McAfee-GW-Edition	BehavesLike.Win32.Generic.dm
FireEye	Generic.mg.d260fdcd940b0da8
Emsisoft	Gen:Variant.Zusy.435149 (B)
Ikarus	Trojan.Win32.Krypt
GData	Win32.Trojan.PSE.10D7YYA
Jiangmin	Exploit.CVE-2015-2546.b
Google	Detected
Avira	HEUR/AGEN.1317613
MAX	malware (ai score=88)
Arcabit	Trojan.Zusy.D6A3CD
ZoneAlarm	HEUR:Trojan.Win32.Packed.gen
Microsoft	Trojan:Win32/Redline.AX!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R509735
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.36350.4qW@ayo5Dal
VBA32	TrojanPSW.Stealer
Cylance	unsafe
Panda	Trj/GdSda.A
APEX	Malicious
Rising	Backdoor.Convagent!8.123DC (TFE:5:oIHmge2KJyH)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Kryptik.HQJN!tr
AVG	Win32:DropperX-gen [Drp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan:Win32/Redline.AX!MTB?

Trojan:Win32/Redline.AX!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X