Win32.Morto.A removal tips

The Win32.Morto.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32.Morto.A virus can do?

• Sample contains Overlay data
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Attempts to identify installed AV products by registry key
• Adds itself to the Safe Mode boot to ensure its start
• Yara detections observed in process dumps, payloads or dropped files

How to determine Win32.Morto.A?

File Info:
name: C242B7EA5788241B68CE.mlw
path: /opt/CAPEv2/storage/binaries/d0295452e30ffd6a3135be23c378d05746981bdcb2db62fb97aa44b276cddc7e
crc32: 88F4B139
md5: c242b7ea5788241b68ce962ce4c83767
sha1: 3f12098d242e21ab1d30a61ba6859647a50859c6
sha256: d0295452e30ffd6a3135be23c378d05746981bdcb2db62fb97aa44b276cddc7e
sha512: 043e1304567c3384ec37b83e7a0465d4eafabeb69f47ae4fef6379eb15afaa506e1fb93427757ef955b6fdc3310f128439927e0b49f2f83071d466ddcf3ea1a2
ssdeep: 3072:7X/4eI9RNZAOKCQp5hhPo9FpxiDRuwEkXin+RwmHi:j/1Fbhii+aHi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T193C39D1BB7D08422D780C630255CDB32AEBAF95A1E37DA53CF565A297C30483566E38B
sha3_384: c861b77e0091f08c7666351081d3c2851d6535291f208522317cc63c9125c87541d656c96e7f76f1796851929f46e61d
ep_bytes: 60e8000000005883c02d33db8b0c1881
timestamp: 1999-01-12 18:42:19

Version Info:
CompanyName: InstallShield Software Corporation
FileDescription: 32-bit Setup Launcher
FileVersion: 5, 52, 164, 0
LegalCopyright: Copyright© 1990-1998 InstallShield Software Corporation, Phone: (847) 240-9111
ProductName: InstallShield®
ProductVersion: 5, 52
Translation: 0x0409 0x04e4

Win32.Morto.A also known as:

How to remove Win32.Morto.A?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.