Trojan:Win32/RedLine.RDDK!MTB removal

The Trojan:Win32/RedLine.RDDK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/RedLine.RDDK!MTB virus can do?

Authenticode signature is invalid

How to determine Trojan:Win32/RedLine.RDDK!MTB?


File Info:
name: 75D206E85C040A808787.mlw
path: /opt/CAPEv2/storage/binaries/eb16de7081fe503164e1ff2a6a5d68c649cf8c5ca3386933e5225e441e9a43b3
crc32: A3B254B2
md5: 75d206e85c040a808787da3e0355af48
sha1: dd5de2a8727cd6452865676690f78a6abeec67f1
sha256: eb16de7081fe503164e1ff2a6a5d68c649cf8c5ca3386933e5225e441e9a43b3
sha512: 11c1ea51c2fed798bcb4f57fa83197623ae0c50bb9c2748a4e55e6425bc722be565afd492ebd3619cef684b244a34b409b0fe8e1fba5f0a1c915faf905582e7f
ssdeep: 6144:uzCAlDiGarJuUZQbHVwHPAmAOaV53viKC:uz9iGarJuUOmMVpiKC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DF249E01B5D18472D4B2153209F4EBB65B3EB9600BA59AEFA7D40F7E4F302C1E631967
sha3_384: f062b6c3b55dc693fbddcaff995fd0767ebdb3315664660e61901737212e4f29ca5d135b69e58c7571f662b5821d7427
ep_bytes: e8f2070000e974feffff558bec8b4508
timestamp: 2023-09-27 12:21:11

Version Info:
0: [No Data]

Trojan:Win32/RedLine.RDDK!MTB also known as:

Bkav	W32.AIDetectMalware
CyrenCloud	W32/ABRisk.SSRD-3622:51:100:105.EB16DE70!Threatlookup
Lionic	Trojan.Win32.RedLine.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.75d206e85c040a80
CAT-QuickHeal	Trojan.GenericPMF.S31412796
Skyhigh	BehavesLike.Win32.CobaltStrike.dh
ALYac	Gen:Variant.Zusy.494463
Cylance	unsafe
VIPRE	Gen:Variant.Zusy.494463
Sangfor	Trojan.Win32.Redline.V09z
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/RedLine.207bfca7
K7GW	Trojan ( 005abe431 )
K7AntiVirus	Trojan ( 005abe431 )
Arcabit	Trojan.Zusy.D78B7F
BitDefenderTheta	Gen:NN.ZexaF.36608.nqW@aCcvlIc
VirIT	Trojan.Win32.GenusT.DSEQ
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.GOHF
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Injurer.gen
BitDefender	Gen:Variant.Zusy.494463
NANO-Antivirus	Trojan.Win32.Inject4.kbjhfi
MicroWorld-eScan	Gen:Variant.Zusy.494463
Avast	Win32:PWSX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bf2ddb
Ad-Aware	Gen:Variant.Zusy.494463
TACHYON	Backdoor/W32.Mokes.222720.G
Emsisoft	Gen:Variant.Zusy.494463 (B)
F-Secure	Trojan.TR/AD.Nekark.vzplq
DrWeb	Trojan.Inject4.61437
TrendMicro	TROJ_GEN.R002C0DIR23
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
Varist	W32/Kryptik.KSV.gen!Eldorado
Avira	TR/AD.Nekark.vzplq
Antiy-AVL	Trojan[Backdoor]/Win32.Mokes.gen
Microsoft	Trojan:Win32/RedLine.RDDK!MTB
ZoneAlarm	HEUR:Trojan.Win32.Injurer.gen
GData	Gen:Variant.Zusy.494463
Google	Detected
AhnLab-V3	Trojan/Win.TrickBot.C5496706
McAfee	GenericRXAA-AA!75D206E85C04
MAX	malware (ai score=80)
VBA32	TrojanPSW.RedLine
Malwarebytes	Trojan.MalPack.SAB.Generic
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DIR23
Rising	Trojan.SmokeLoader!1.EB4F (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.209684627.susgen
Fortinet	W32/Kryptik.HUTD!tr
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/RedLine.RDDK!MTB?

Trojan:Win32/RedLine.RDDK!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X