Trojan:Win32/Spybot.BK!MTB malicious file

The Trojan:Win32/Spybot.BK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Spybot.BK!MTB virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Performs some HTTP requests
Uses Windows utilities for basic functionality
Creates a slightly modified copy of itself
Anomalous binary characteristics

Related domains:

redirector.gvt1.com

r1—sn-4g5e6ne6.gvt1.com

update.googleapis.com

How to determine Trojan:Win32/Spybot.BK!MTB?


File Info:
crc32: F9469661
md5: 402743ba7e009ddc180d17cad59a116a
name: 402743BA7E009DDC180D17CAD59A116A.mlw
sha1: e3dd52bcc9eeab3fc1aa7313fca11e0aa1a99ad8
sha256: 8cdb536378c7a12bb65333b52664cb99cd74a8b14afbc1b74ae73111b8edfc57
sha512: e17da7120b6011f2ef937d0e013973724d7a9d19784277c48b1f6c70f9a784b955813b1064a15da3571d2230e41054fc7357cd6d3f35e5fe8d901b39b83de373
ssdeep: 6144:8ZMrqx40J16pbzXYIiy0at42EDLIxL3G8fiZqhuyAHLELSiOg3C4wW/oUoa6UmK5:8ZMmb2dMLaV3J3RL2ExOgJRoUoa6vKVH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan:Win32/Spybot.BK!MTB also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36032076
FireEye	Generic.mg.402743ba7e009ddc
ALYac	Spyware.AgentTesla
Cylance	Unsafe
VIPRE	VirTool.Win32.Obfuscator.da!k (v)
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.36032076
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Trojan.OFQD-4782
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	Trojan.Win32.Zenpak.bczc
Alibaba	Backdoor:Win32/Spybot.2519185a
NANO-Antivirus	Virus.Win32.Gen.ccmw
ViRobot	Trojan.Win32.Z.Spybot.320000
AegisLab	Trojan.Win32.Zbot.lx9X
Rising	Dropper.Generic!8.35E (TFE:5:zmXUi4vfSnG)
Ad-Aware	Trojan.GenericKD.36032076
Emsisoft	Trojan.GenericKD.36032076 (B)
Comodo	Malware@#1ysv8nef3ey79
F-Secure	Backdoor.BDS/ZeroAccess.Gen7
DrWeb	BackDoor.SpyBotNET.25
TrendMicro	TROJ_GEN.R002C0DA721
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
Sophos	Mal/Generic-S
Ikarus	Trojan.Inject
Webroot	W32.Trojan.Gen
Avira	BDS/ZeroAccess.Gen7
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Zenpak
Kingsoft	Win32.Troj.Zenpak.bc.(kcloud)
Microsoft	Trojan:Win32/Spybot.BK!MTB
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D225CE4C
ZoneAlarm	Trojan.Win32.Zenpak.bczc
GData	Trojan.GenericKD.36032076
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4292285
McAfee	RDN/Spybot.worm.gen
VBA32	Trojan.Zenpak
Malwarebytes	Spyware.TelegramBot.TOR.Generic
Panda	Trj/CI.A
Zoner	Trojan.Win32.100493
ESET-NOD32	a variant of Win32/Kryptik.HIQE
TrendMicro-HouseCall	TROJ_GEN.R002C0DA721
Tencent	Win32.Trojan.Inject.Auto
Yandex	Trojan.Zenpak!GSyMK6eed+o
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.HIOZ!tr
BitDefenderTheta	Gen:NN.ZexaF.34760.tCZ@aueOP!di
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Generic/Backdoor.7ae

How to remove Trojan:Win32/Spybot.BK!MTB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:Win32/Spybot.BK!MTB malicious file