Trojan

How to remove “Trojan:Win32/Rhadamanthys.A!MTB”?

Malware Removal

The Trojan:Win32/Rhadamanthys.A!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Rhadamanthys.A!MTB virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Trojan:Win32/Rhadamanthys.A!MTB?


File Info:

name: FCA545D5CE2AA4F73C77.mlw
path: /opt/CAPEv2/storage/binaries/d27b4d6b67f12b0c705aca551dc5496124a5fb6702f3883fe60a9f6a12b09f23
crc32: 0022728E
md5: fca545d5ce2aa4f73c77ee83bebfcccb
sha1: 0a4909130f2edf8dd8fb5badff3f017f40bcbca8
sha256: d27b4d6b67f12b0c705aca551dc5496124a5fb6702f3883fe60a9f6a12b09f23
sha512: 25b05c889ca2c34d53279f53429f9850bd1ed2fbd938e0384a3949a9552fbb20ee702e68b007daba641859529f5df40c4aa08b2f98f4762a8b1681545cab812c
ssdeep: 6144:sevY8mWu3wB4HzlrzPOefxoEBK3ASslWo:1Y8mWudzlZhyAt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179D5C002A3D1BC74E62646328E2DF7F935AEBE558F75AFB726186A4F1C70174C123281
sha3_384: 897a60f965fec514c76affc3128d11dda76561807797efffdfb3f2a2201214cc9563ce361360f0a24c5d3e76c611e9c3
ep_bytes: 03844415dc75e38bfe5beb170fb61633
timestamp: 2004-08-16 19:56:18

Version Info:

0: [No Data]

Trojan:Win32/Rhadamanthys.A!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Tedy.4!c
MicroWorld-eScanGen:Variant.Tedy.342941
ClamAVWin.Packed.Trojanx-10001393-0
FireEyeGeneric.mg.fca545d5ce2aa4f7
ALYacGen:Variant.Tedy.342941
MalwarebytesGeneric.Trojan.Malicious.DDS
ZillyaTrojan.AgentAGen.Win32.6537
SangforTrojan.Win32.Rhadamanthys.Veri
K7AntiVirusTrojan ( 005a36571 )
AlibabaTrojan:Win32/Generic.754c38c8
K7GWTrojan ( 005a36571 )
BitDefenderThetaGen:NN.ZexaF.36250.ZsZ@a4tcFNk
VirITTrojan.Win32.Genus.OVT
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent_AGen.AQT
APEXMalicious
CynetMalicious (score: 100)
BitDefenderGen:Variant.Tedy.342941
TencentWin32.Trojan.Agent.Simw
TACHYONTrojan/W32.Agent.2932736.AO
EmsisoftGen:Variant.Tedy.342941 (B)
F-SecureTrojan.TR/Agent_AGen.muysd
VIPREGen:Variant.Tedy.342941
TrendMicroTROJ_GEN.R023C0DE923
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Tedy.342941
AviraTR/Agent_AGen.muysd
Antiy-AVLTrojan/Win32.Rhadamanthys
ArcabitTrojan.Tedy.D53B9D
MicrosoftTrojan:Win32/Rhadamanthys.A!MTB
GoogleDetected
Acronissuspicious
McAfeeArtemis!FCA545D5CE2A
MAXmalware (ai score=89)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R023C0DE923
RisingTrojan.Rhadamanthys!8.178A1 (TFE:3:ckqSEvQ6QHF)
IkarusTrojan.Win32.Agent
FortinetW32/PossibleThreat
AVGFileRepMalware [Misc]
AvastFileRepMalware [Misc]
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan:Win32/Rhadamanthys.A!MTB?

Trojan:Win32/Rhadamanthys.A!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment