Trojan:Win32/Totbrick.C removal

The Trojan:Win32/Totbrick.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Totbrick.C virus can do?

• Executable code extraction
• Creates RWX memory
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Deletes its original binary from disk
• Exhibits behavior characteristic of TrickBot banking trojan
• Installs itself for autorun at Windows startup
• Creates a copy of itself
• Anomalous binary characteristics
• Attempts to create a known TrickBot mutex.

How to determine Trojan:Win32/Totbrick.C?

File Info:
crc32: 62E925AB
md5: 218613f0f1d2780f08e754be9e6f8c64
name: upload_file
sha1: fdc4c8f29642c3a9a9aa2180b3cca7d95d8c35e1
sha256: a162bb9219a09b302b90bc6f908e117e3fb2c722560336d378fd76a8f22f78f8
sha512: e9a2ff8c18aa653bfd7a61710a03d649780f25dc8c380f6cedc57d5c848a117abb632aade29d8c6fa71b5a612135deedc9a924da96b874fcb15c64e9da6e2e38
ssdeep: 6144:JLMNe5kFT/RK1WoJg4ouLl2pFUBm5iKsTFxcW3Qt07kjnnnnM:JLMMktpUWoJg4ouLsFUICcYQmkjnnnnM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan:Win32/Totbrick.C also known as:

How to remove Trojan:Win32/Totbrick.C?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.