Win32/TrickBot.DI removal guide

The Win32/TrickBot.DI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrickBot.DI virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/TrickBot.DI?


File Info:
crc32: 593EB31E
md5: 5073006a2bf4d81744de9d85600e4946
name: update2.exe
sha1: 8b84359c40a6d649eed0beb9cf6498c8ab52a815
sha256: 79a7cbff16ab27a041de23b4592b69fdec6b62f557094bf62b6328a8e0948a16
sha512: dc0fef3f1a34c784b0658a6f3ff4c4a2011b35fd89f6a918c55f115847a948ac15b07579549c596b844f5b0ed209d7f65c5217acfcd1b28a1b2189a95c49a2e9
ssdeep: 6144:J8P/Aes/sONw7005f015e0wP+uB+43zn5bAWsQfdbTZ2acqaj37kVUImjxoAc:w/0/sBI0WzwR+wzJLTPyd7fImJ
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/TrickBot.DI also known as:

FireEye	Generic.mg.5073006a2bf4d817
Cylance	Unsafe
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34130.FqW@aeE2m9ai
Kaspersky	Trojan.Win32.Zenpak.ajmw
Trapmine	malicious.moderate.ml.score
Endgame	malicious (high confidence)
ZoneAlarm	Trojan.Win32.Zenpak.ajmw
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
APEX	Malicious
ESET-NOD32	Win32/TrickBot.DI
SentinelOne	DFI – Suspicious PE
CrowdStrike	win/malicious_confidence_80% (D)

How to remove Win32/TrickBot.DI?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/TrickBot.DI removal guide