Trojan

Trojan:Win32/TrickBot.DK!MTB removal instruction

Malware Removal

The Trojan:Win32/TrickBot.DK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/TrickBot.DK!MTB virus can do?

  • Executable code extraction
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.

How to determine Trojan:Win32/TrickBot.DK!MTB?



File Info:

crc32: D2C171D7
md5: c252603232987121f642be93e9e39348
name: C252603232987121F642BE93E9E39348.mlw
sha1: 9a06574b7f9f732cf6265fe0aff4c133c1cb8314
sha256: 77b7bbf78f7a14d808b61a23ea7b29c2bc2e3d8faf62bccf3459182730ea42e3
sha512: 70630a8d2c467a6fed99443da2a776c67b6f819c58f5c77d6af8e441a53c891eb169c27a5ee4b5f799d3d51df922d9688d1f4edd55aa6b094d1422291681dc7e
ssdeep: 12288:6EvuYB/r+XfQzgoIpBPn64nP8MFQwn7tr9scCE2fJC8JicB:hDzzgpVFVt+fXb
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 2007
InternalName: WebBrowseHttp
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: WebBrowseHttp x5e94x7528x7a0bx5e8f
ProductVersion: 1, 0, 0, 1
FileDescription: WebBrowseHttp Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: WebBrowseHttp.EXE
Translation: 0x0804 0x04b0

Trojan:Win32/TrickBot.DK!MTB also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Packed.140
MicroWorld-eScanTrojan.GenericKD.35304324
FireEyeGeneric.mg.c252603232987121
CAT-QuickHealTrojan.Zenpak
McAfeeArtemis!C25260323298
AegisLabTrojan.Multi.Generic.4!c
K7AntiVirusTrojan ( 00561bb31 )
BitDefenderTrojan.GenericKD.35304324
K7GWTrojan ( 00561bb31 )
Cybereasonmalicious.b7f9f7
BitDefenderThetaGen:NN.ZexaE.34634.Py1@aGcbJkaH
CyrenW32/Trojan.YUEI-8806
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R057C0DKL20
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Zenpak.gen
AlibabaTrojan:Win32/TrickBot.26c61d78
ViRobotTrojan.Win32.Z.Trickbot.675899
RisingTrojan.Generic@ML.92 (RDML:oxLlIYfsqXBSfkKxlVGngQ)
Ad-AwareTrojan.GenericKD.35304324
SophosMal/Generic-S
ComodoMalware@#1jul2our4omx5
F-SecureTrojan.TR/AD.Emotet.grbyq
TrendMicroTROJ_GEN.R057C0DKL20
McAfee-GW-EditionBehavesLike.Win32.Emotet.jc
EmsisoftTrojan.TrickBot (A)
IkarusTrojan.Win32.Trickbot
WebrootW32.Trojan.TR.AD.Emotet.grbyq
AviraTR/AD.Emotet.grbyq
MAXmalware (ai score=99)
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/TrickBot.DK!MTB
GridinsoftTrojan.Win32.TrickBot.oa
ArcabitTrojan.Generic.D21AB384
ZoneAlarmHEUR:Trojan.Win32.Zenpak.gen
GDataTrojan.GenericKD.35304324
CynetMalicious (score: 85)
ALYacTrojan.Trickster.Gen
MalwarebytesTrojan.MalPack.TRE
PandaTrj/CI.A
APEXMalicious
ESET-NOD32Win32/TrickBot.CR
eGambitUnsafe.AI_Score_99%
FortinetW32/TrickBot.CR!tr
MaxSecureTrojan.Malware.73832973.susgen
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360Generic/HEUR/QVM07.1.5D64.Malware.Gen

How to remove Trojan:Win32/TrickBot.DK!MTB?

Trojan:Win32/TrickBot.DK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment