Trojan:Win32/Redline.GNR!MTB removal instruction

The Trojan:Win32/Redline.GNR!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Redline.GNR!MTB virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan:Win32/Redline.GNR!MTB?


File Info:
name: 299BA88A355F1B8E709A.mlw
path: /opt/CAPEv2/storage/binaries/84c0a211213227ee1eb4ec49d75ae952e8830b5f0123c5b67a820a3890191484
crc32: E8731BFB
md5: 299ba88a355f1b8e709a3c095255e6f4
sha1: f6f77d9c4e81a7704580a7017214e8fd8489d680
sha256: 84c0a211213227ee1eb4ec49d75ae952e8830b5f0123c5b67a820a3890191484
sha512: 11ea4293df1e008d1b64de4b7405065f74feea8c822cabfde303a673dbed5b5866a7ddcde455eaf655359ca3a0a125ae8dcf337ee20033032871a37976ff57d8
ssdeep: 12288:ubc03u2dASlpetf+BVVpsYlHYBPTCqAbmxoRj3cB/RUbu9cdTSjBjqJycOU+dm:L0+2dASetf+BVzsGIoRj3cBW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12A45AF3178C45572EEE320B647ECFA69426DD4B0035805EB22DB37EED770AC16B3259A
sha3_384: 66b132d89589e5392611210c71721cae7b195e37dfd2090a154754e307f22cfa61579358abffa66a1ca06a7b395f0c19
ep_bytes: e9ea280400e97b270700e95daf0400e9
timestamp: 2023-11-02 09:49:04

Version Info:
0: [No Data]

Trojan:Win32/Redline.GNR!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Redline.i!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.38044
MicroWorld-eScan	Gen:Variant.Ser.Zusy.4711
FireEye	Gen:Variant.Ser.Zusy.4711
Skyhigh	BehavesLike.Win32.Smokeloader.th
ALYac	Gen:Variant.Ser.Zusy.4711
Malwarebytes	Trojan.MalPack.RND.Generic
Sangfor	Infostealer.Win32.Agent.V26q
K7AntiVirus	Trojan ( 005ac7d11 )
BitDefender	Gen:Variant.Ser.Zusy.4711
K7GW	Trojan ( 005ac7d11 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaF.36792.hDW@aqvRfpc
VirIT	Trojan.Win32.GenusT.DTKV
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HUYH
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Pwsx-10012424-0
Kaspersky	HEUR:Trojan-PSW.Win32.Stealerc.pef
Alibaba	TrojanPSW:Win32/Redline.37a83119
NANO-Antivirus	Trojan.Win32.Inject4.kczvob
ViRobot	Trojan.Win.Z.Ser.1165312
Tencent	Malware.Win32.Gencirc.10bf42a5
TACHYON	Trojan-Spy/W32.InfoStealer.1165312.B
Sophos	Troj/Krypt-ABY
F-Secure	Trojan.TR/AD.Nekark.egwns
VIPRE	Gen:Variant.Ser.Zusy.4711
TrendMicro	TROJ_GEN.R011C0DK623
Emsisoft	Gen:Variant.Ser.Zusy.4711 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.PSW.Stealerc.mh
Varist	W32/Kryptik.KNN.gen!Eldorado
Avira	TR/AD.Nekark.egwns
Antiy-AVL	Trojan/Win32.Kryptik
Kingsoft	Win32.Trojan-PSW.Stealerc.pef
Microsoft	Trojan:Win32/Redline.GNR!MTB
Arcabit	Trojan.Ser.Zusy.D1267
ZoneAlarm	HEUR:Trojan-PSW.Win32.Stealerc.pef
GData	Win32.Trojan.PSE.12W6N6R
Google	Detected
AhnLab-V3	Trojan/Win.RedLine.R620138
VBA32	TrojanSpy.Stealer
MAX	malware (ai score=85)
DeepInstinct	MALICIOUS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R011C0DK623
Rising	Backdoor.Agent!8.C5D (TFE:1:6GqAaQTPo2I)
Yandex	Trojan.Kryptik!6p+3MuRet4g
Ikarus	Trojan.Win32.Redline
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Injector.ETFD!tr
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]

How to remove Trojan:Win32/Redline.GNR!MTB?

Trojan:Win32/Redline.GNR!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X