What is “Trojan:Win32/TrickBot.ARJ!MTB”?

The Trojan:Win32/TrickBot.ARJ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/TrickBot.ARJ!MTB virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Creates a copy of itself

How to determine Trojan:Win32/TrickBot.ARJ!MTB?


File Info:
crc32: A31F092A
md5: 2edc04c6afae515f6806074baf818043
name: lookup.hlp
sha1: 34de678af68338084b88749b5afbe07d7e3c1026
sha256: b4921036575c053f51f7df9a0df95b76bbb69ab2d85b52f312d358983ef14a36
sha512: c2a361d27a91a702b2afb337f2176b382e565bcb584558cb19790c0984efe6c8b1cffacbc56bb2ce89d3088d64cead9d465d58bdb9acbfb3369c730595c425c8
ssdeep: 12288:JPgdt9CINa8NTbh/2kp165CAVCEnDHx8B5vHbT:JP49CINa8NTbdCCcRWfbT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2008 Hans Dietrich
FileVersion: 1, 0, 0, 1
ProductName: XIconTest Application
E-mail: hdietrich@gmail.com
ProductVersion: 1, 0, 0, 1
FileDescription: XIconTest MFC Application
Article: www.codeproject.com
OriginalFilename: XIconTest.exe
Translation: 0x0409 0x04b0

Trojan:Win32/TrickBot.ARJ!MTB also known as:

MicroWorld-eScan	Gen:Variant.Midie.69458
McAfee	Artemis!2EDC04C6AFAE
Cylance	Unsafe
BitDefender	Gen:Variant.Midie.69458
K7GW	Trojan ( 0055e3cb1 )
Cyren	W32/Trickbot.CE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.GZXS
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Banker.Win32.Trickster.hvo
Alibaba	TrojanBanker:Win32/Trickster.0c6edb8c
Ad-Aware	Gen:Variant.Midie.69458
Emsisoft	Gen:Variant.Midie.69458 (B)
Comodo	Malware@#2m6abeh7y3o3y
F-Secure	Trojan.TR/Crypt.Agent.upfub
DrWeb	Trojan.Inject3.32386
McAfee-GW-Edition	BehavesLike.Win32.BadFile.hh
Trapmine	malicious.moderate.ml.score
FireEye	Gen:Variant.Midie.69458
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
F-Prot	W32/Trickbot.CE.gen!Eldorado
Webroot	W32.Trojan.Emotet
Avira	TR/Crypt.Agent.upfub
Endgame	malicious (high confidence)
Arcabit	Trojan.Midie.D10F52
ZoneAlarm	Trojan-Banker.Win32.Trickster.hvo
Microsoft	Trojan:Win32/TrickBot.ARJ!MTB
AhnLab-V3	Malware/Win32.Generic.C3862695
ALYac	Gen:Variant.Midie.69458
MAX	malware (ai score=81)
VBA32	BScope.TrojanBanker.Trickster
Malwarebytes	Trojan.TrickBot
Panda	Trj/Genetic.gen
GData	Gen:Variant.Midie.69458
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
Qihoo-360	Win32/Trojan.8a2

How to remove Trojan:Win32/TrickBot.ARJ!MTB?

Trojan:Win32/TrickBot.ARJ!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X