Trojan:Win32/TrickBot.SS!MTB removal instruction

The Trojan:Win32/TrickBot.SS!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/TrickBot.SS!MTB virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Marathi
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/TrickBot.SS!MTB?


File Info:
crc32: 4303AD5D
md5: 3861c2fe63cbe5ff02746e571b8da318
name: 3861C2FE63CBE5FF02746E571B8DA318.mlw
sha1: f4214165dca6ce378ff138dfd62e92b3117da4d6
sha256: 7345f9b3532de69bd07cf8d727d1af3aa8c17df446ff190e10e43b2f80125147
sha512: 0ce59d2ef9a14376cd921759739d54d68ea5911aee34de96e6a6e87fa6fbe41dd03613ade15373f38b98ce2baca0ed09ccf54e0be7d6b5790d2a6328017b5ddb
ssdeep: 12288:VyC0K5/WH2PFPDPNi7jwnE1PJPY6/nWMrYPZPyv0fYbWP2PkczTrdMvbjt3Vwimr:N5AgvLVm7+w5cHc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Sameeriya Soft
InternalName: SQLAnalyzer
FileVersion: 5.0.0.1
CompanyName: Sameeriya Soft, Muttippalam
LegalTrademarks: SQL Analyzer
Comments: Easy to use tool for SQL Server developers
ProductName: SQL Analyzer Professional Edition
ProductVersion: 5.0.0.1
FileDescription: Easy to use tool for SQL Server developers
OriginalFilename: SQLAnalyzer.exe

Trojan:Win32/TrickBot.SS!MTB also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Trick.46644
MicroWorld-eScan	Trojan.GenericKDZ.68737
FireEye	Generic.mg.3861c2fe63cbe5ff
McAfee	Trickbot-FSNZ!3861C2FE63CB
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Trojan.GenericKDZ.68737
Cybereason	malicious.5dca6c
Cyren	W32/TrickBot.FB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Vebzenpak.xrt
NANO-Antivirus	Trojan.Win32.Vebzenpak.hnwmtp
Ad-Aware	Trojan.GenericKDZ.68737
F-Secure	Heuristic.HEUR/AGEN.1137030
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.gh
Emsisoft	Trojan.GenericKDZ.68737 (B)
Ikarus	Trojan.Win32.Trickbot
Jiangmin	Trojan.Vebzenpak.had
Avira	HEUR/AGEN.1137030
Antiy-AVL	Trojan/Win32.Vebzenpak
Microsoft	Trojan:Win32/TrickBot.SS!MTB
Arcabit	Trojan.Generic.D10C81
ZoneAlarm	Trojan.Win32.Vebzenpak.xrt
GData	Trojan.GenericKDZ.68737
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R345479
VBA32	TScope.Trojan.VB
ALYac	Trojan.GenericKDZ.68737
MAX	malware (ai score=82)
Malwarebytes	Trojan.TrickBot
ESET-NOD32	a variant of Win32/Injector.EMQP
Rising	Trojan.TrickBot!8.E313 (TFE:4:CtLWiG3tS1T)
Yandex	Trojan.Injector!7JOHDc4a9Jg
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Emotet.GENP!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (D)
MaxSecure	Trojan.Malware.109479104.susgen

How to remove Trojan:Win32/TrickBot.SS!MTB?

Trojan:Win32/TrickBot.SS!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:Win32/TrickBot.SS!MTB removal instruction