Trojan:Win32/Zloader.DD!MTB removal instruction

The Trojan:Win32/Zloader.DD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Zloader.DD!MTB virus can do?

Unconventionial binary language: Russian
Anomalous binary characteristics

How to determine Trojan:Win32/Zloader.DD!MTB?


File Info:
crc32: 9F3C6066
md5: 75784d297b3d6fb4d434b6890f6334ab
name: 75784D297B3D6FB4D434B6890F6334AB.mlw
sha1: dc945e57be6bdd3cc4894d6cff7dd90a76f6c416
sha256: 95a8370c36d81ea596d83892115ce6b90717396c8f657b17696c7eeb2dba1d2e
sha512: f54baffc5b545aaa4d939505181466d7b78bb583fd32da6cbf8cea058fca8869e8bf7bf3272f43d09a7b24dc6e821c9aa0e3875dd2959173e704d57568915fa1
ssdeep: 6144:/fKLL4LphTWKgV4G/4XkAXSH94ibacKWNBvQVOjrbbI37C6:/CLc9RWKgVHJpJKWNBvQErbo7C6
type: MS-DOS executable, MZ for MS-DOS

Version Info:
LegalCopyright: (x421) x41ax43ex440x43fx43ex440x430x446x438x44f x41cx430x439x43ax440x43ex441x43ex444x442, 2000
InternalName: Dgnet
FileVersion: 1, 0, 0, 1
CompanyName: Microsoft
ProductName: Dgnet x43cx43ex434x443x43bx44c
OLESelfRegister: 
ProductVersion: 1, 0, 0, 1
FileDescription: x41cx43ex434x443x43bx44c Dgnet
OriginalFilename: Dgnet.dll
Translation: 0x0419 0x04b0

Trojan:Win32/Zloader.DD!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.46873588
CAT-QuickHeal	Trojandownloader.Zload
McAfee	RDN/Generic.dx
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Trojan.KDRY-5162
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/GenKryptik.FJWQ
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Alibaba	TrojanDownloader:Win32/Zload.0a47ba7b
NANO-Antivirus	Virus.Win32.Gen.ccmw
Ad-Aware	Trojan.GenericKD.46873588
McAfee-GW-Edition	RDN/Generic.dx
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanDownloader.Zload.hv
Webroot	W32.Malware.Gen
Avira	TR/AD.MeterpreterSC.slajd
Arcabit	Trojan.Generic.D2CB3BF4
Microsoft	Trojan:Win32/Zloader.DD!MTB
AhnLab-V3	Trojan/Win.Agent.C4612454
VBA32	BScope.TrojanDownloader.Zload
Malwarebytes	Trojan.ZLoader
Ikarus	Trojan-Downloader.Win32.ZLoader
Fortinet	W32/Zload.BJD!tr.dldr
Panda	Trj/GdSda.A

How to remove Trojan:Win32/Zloader.DD!MTB?

Trojan:Win32/Zloader.DD!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X