What is "Trojan:Win32/TrickBot.DN!MTB"?

The Trojan:Win32/TrickBot.DN!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/TrickBot.DN!MTB virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/TrickBot.DN!MTB?


File Info:
crc32: 8C50489D
md5: 10ba8cb2268f949026747f0f2a3ec733
name: 10BA8CB2268F949026747F0F2A3EC733.mlw
sha1: befd5413182b194fad1464b8a489569b79f98f4c
sha256: d2122f044167ecb831d202ce7829d2e50a902266f7e290e42b5ff432e8879b9a
sha512: b79c707ffd8a9fbc17b5a59ab2dcadd73662d6a425e5f1ea5bf64d258d3d0a7a2d637ff756ae9fa1dda8dc142eda657f23bd2cf33e8009acefb51fa43f1b7bf8
ssdeep: 12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYupvuah:ZXQUIsQpMsequrmGIh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2002
InternalName: MfcTTT
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: MfcTTT Application
ProductVersion: 1, 0, 0, 1
FileDescription: MfcTTT MFC Application
OriginalFilename: MfcTTT.EXE
Translation: 0x0409 0x04b0

Trojan:Win32/TrickBot.DN!MTB also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00561d711 )
Elastic	malicious (high confidence)
ClamAV	Win.Malware.Midie-7369865-0
CAT-QuickHeal	Trojan.Emotet
McAfee	Emotet-FNZ!10BA8CB2268F
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 00561d711 )
Cybereason	malicious.2268f9
Symantec	Packed.Generic.554
ESET-NOD32	Win32/TrickBot.CJ
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMD1.hp
Avast	Win32:BankerX-gen [Trj]
Cynet	Malicious (score: 100)
NANO-Antivirus	Trojan.Win32.GenKryptik.gfmhby
Tencent	Malware.Win32.Gencirc.10b9d254
Sophos	ML/PE-A + Mal/EncPk-APC
Comodo	TrojWare.Win32.Emotet.PE@8qutmo
DrWeb	Trojan.Trick.46470
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TrojanSpy.Win32.EMOTET.SMD1.hp
McAfee-GW-Edition	BehavesLike.Win32.Emotet.hc
Emsisoft	Trojan.Emotet (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Agent.gisp
Avira	HEUR/AGEN.1124004
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Trojan:Win32/TrickBot.DN!MTB
Gridinsoft	Trojan.Win32.Emotet.oa!s1
Arcabit	Trojan.Zusy.D49A7C
ZoneAlarm	HEUR:Trojan-Banker.Win32.Emotet.pef
GData	Gen:Variant.Zusy.301692
AhnLab-V3	Malware/Win32.Generic.R296827
Acronis	suspicious
MAX	malware (ai score=86)
Malwarebytes	Emotet.Trojan.Stealer.DDS
Panda	Trj/GdSda.A
Rising	Trojan.Wacatac!8.10C01 (RDMK:cmRtazo6Qr1HKYkFxpXB3NsnaUeq)
Yandex	Trojan.GenKryptik!KcdrPd8N1Dw
Ikarus	Trojan-Spy.Win32.TrickBot
Fortinet	W32/GenKryptik.DWDK!tr
AVG	Win32:BankerX-gen [Trj]

How to remove Trojan:Win32/TrickBot.DN!MTB?

Trojan:Win32/TrickBot.DN!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan:Win32/TrickBot.DN!MTB”?