Trojan:Win32/Redline.MM!MTB removal

The Trojan:Win32/Redline.MM!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Redline.MM!MTB virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan:Win32/Redline.MM!MTB?


File Info:
name: 488EC59553C1539A546D.mlw
path: /opt/CAPEv2/storage/binaries/dd218871bd172dde1d3912cc1a0dede58f383e1fc4301ab3adbb7f580f3b5411
crc32: EC443446
md5: 488ec59553c1539a546d1ebee3de7d4b
sha1: d35e335a1e43e8944b52045da32a6ca417d0d195
sha256: dd218871bd172dde1d3912cc1a0dede58f383e1fc4301ab3adbb7f580f3b5411
sha512: 2ee61c7e77fb64ab35a8c768802a9ff1873a8d7dc31b1297fe0ae4d9ad64f095e7fa8bcde8c6bae0c2ed44021303e1def1633582608825f8a8c666d0838e8bb6
ssdeep: 12288:Lqc1JzU2Rji0bevdVn5h8D8crv1xg4QifXADNOHohdAg06H0E+:L9z3+BrnkD8AEoHohdN0++
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T166E4D12465C26077EA1619B324F6D17538AEF572827C4DEBC7A0EB7C13142D0CEA1E6E
sha3_384: ef720ca9a6d0eda4317bab489cff5d68d06dc81d230b7ebc8d6fdf8aa6ca9df448b4942a6e2e22ecd5843bc78888e417
ep_bytes: e8ad060000e974feffff558bec6a00ff
timestamp: 2024-04-05 16:56:38

Version Info:
0: [No Data]

Trojan:Win32/Redline.MM!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
AVG	TrojanX-gen [Trj]
MicroWorld-eScan	Gen:Variant.Lazy.503913
FireEye	Generic.mg.488ec59553c1539a
Skyhigh	BehavesLike.Win32.Generic.jc
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HWSU
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	VHO:Trojan.Win32.Exnet.gen
BitDefender	Gen:Variant.Lazy.503913
Avast	TrojanX-gen [Trj]
Rising	Trojan.Generic@AI.100 (RDML:XVc5mU+0kVl4T0sglBrliQ)
Emsisoft	Gen:Variant.Lazy.503913 (B)
F-Secure	Trojan.TR/PWS.Sinowal.Gen
Baidu	Win32.Adware.Generic.bo
VIPRE	Gen:Variant.Lazy.503913
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Varist	W32/Agent.IOY.gen!Eldorado
Avira	TR/PWS.Sinowal.Gen
Kingsoft	malware.kb.a.792
Microsoft	Trojan:Win32/Redline.MM!MTB
Arcabit	Trojan.Lazy.D7B069
ZoneAlarm	VHO:Trojan.Win32.Exnet.gen
GData	Gen:Variant.Lazy.503913
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R643257
ALYac	Gen:Variant.Lazy.503913
MAX	malware (ai score=85)
Malwarebytes	Trojan.Injector
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenKryptik.GVLG!tr
DeepInstinct	MALICIOUS
alibabacloud	Trojan[spy]:Win/Lazy

How to remove Trojan:Win32/Redline.MM!MTB?

Trojan:Win32/Redline.MM!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X