In this article, I am going to detail how the Glupteba trojan injected into your system, as well as the best way to remove Glupteba trojan virus.
What is Glupteba trojan?
Name | Glupteba |
Infection Type | Trojan |
Symptoms |
|
Similar behavior | Zenpak, SAgent, Generic, Ursu, Bluteal, Casur |
Fix Tool | See If Your System Has Been Affected by Glupteba trojan |

Trojan viruses are among the leading malware types by its injection frequency for quite a long time. And currently, throughout the pandemic, when malware got significantly active, trojan viruses enhanced their activity, too. You can see a lot of messages on various sources, where users are grumbling concerning the Glupteba trojan virus in their computer systems, as well as asking for help with Glupteba trojan virus elimination.
Trojan Glupteba is a type of virus that infiltrates into your personal computer, and after that executes different harmful functions. These functions rely on a type of Glupteba trojan: it might function as a downloader for many other malware or as a launcher for an additional malicious program which is downloaded in addition to the Glupteba trojan. Throughout the last 2 years, trojans are likewise spread via e-mail add-ons, and in the majority of situations utilized for phishing or ransomware infiltration.
Glupteba2 also known as
Bkav | W32.AIDetectVM.malware2 |
Elastic | malicious (high confidence) |
MicroWorld-eScan | Trojan.GenericKD.44059956 |
CAT-QuickHeal | Trojan.Wacatac |
McAfee | GenericRXAA-AA!0B422DF6C3D7 |
Cylance | Unsafe |
VIPRE | Trojan.Win32.Generic!BT |
Sangfor | Malware |
K7AntiVirus | Trojan ( 005621491 ) |
BitDefender | Trojan.GenericKD.44059956 |
K7GW | Trojan ( 005621491 ) |
TrendMicro | Trojan.Win32.WACATAC.USMANJD20 |
Cyren | W32/Trojan.JDKH-1862 |
Symantec | ML.Attribute.HighConfidence |
APEX | Malicious |
Avast | Win32:Trojan-gen |
Kaspersky | Trojan.Win32.Agentb.kanv |
Alibaba | Trojan:Win32/Agentb.bcbbf4e6 |
NANO-Antivirus | Trojan.Win32.Ot.hzonkz |
ViRobot | Trojan.Win32.Z.Ranumbot.1984000 |
AegisLab | Trojan.Win32.Agentb.4!c |
Ad-Aware | Trojan.GenericKD.44059956 |
Emsisoft | Trojan.GenericKD.44059956 (B) |
Comodo | Malware@#1ukmkv15uacx2 |
F-Secure | Trojan.TR/SpyBot.xxwrs |
DrWeb | Trojan.SpyBot.958 |
Zillya | Trojan.RanumBot.Win32.368 |
Invincea | Mal/Generic-S |
McAfee-GW-Edition | BehavesLike.Win32.Morefi.tc |
FireEye | Generic.mg.0b422df6c3d71d21 |
Sophos | Mal/Generic-S |
Ikarus | Trojan.Win32.Ranumbot |
MaxSecure | Trojan.Malware.108579721.susgen |
Avira | TR/SpyBot.xxwrs |
MAX | malware (ai score=80) |
Antiy-AVL | Trojan/Win32.RanumBot |
Microsoft | Trojan:Win32/Glupteba!MSR |
Arcabit | Trojan.Generic.D2A04D34 |
ZoneAlarm | Trojan.Win32.Agentb.kanv |
GData | Trojan.GenericKD.44059956 |
Cynet | Malicious (score: 100) |
AhnLab-V3 | Trojan/Win32.Fixflo.C4206612 |
ALYac | Trojan.Agent.Ranumbot |
VBA32 | TrojanSpyBot |
Panda | Trj/RnkBend.A |
ESET-NOD32 | a variant of Win32/RanumBot.X |
TrendMicro-HouseCall | Trojan.Win32.WACATAC.USMANJD20 |
Tencent | Win32.Trojan.Agentb.Fru |
Fortinet | W32/RanumBot.X!tr |
Webroot | W32.Malware.Gen |
AVG | Win32:Trojan-gen |
Paloalto | generic.ml |
CrowdStrike | win/malicious_confidence_100% (W) |
Qihoo-360 | Generic/Trojan.Spy.1e5 |
Domains that associated with Glupteba:
0 | z.whorecord.xyz |
1 | a.tomx.xyz |
What are the symptoms of Glupteba trojan?
- The binary likely contains encrypted or compressed data.;
- The executable is compressed using UPX;
- Network activity detected but not expressed in API logs;
The frequent indicator of the Glupteba trojan virus is a steady appearance of different malware – adware, browser hijackers, and so on. As a result of the activity of these destructive programs, your system ends up being really lagging: malware uses up large amounts of RAM and CPU capacities.
An additional detectable impact of the Glupteba trojan virus existence is unknown processes showed in task manager. Sometimes, these processes may try to mimic system processes, however, you can understand that they are not legit by taking a look at the origin of these tasks. Pseudo system applications and Glupteba trojan’s processes are always listed as a user’s processes, not as a system’s.
How to remove Glupteba trojan virus?
- Download and install GridinSoft Anti-Malware.
- Open GridinSoft Anti-Malware and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Select proper browser and options – Click “Reset”.
- Restart your computer.
To clean up Glupteba trojan and ensure that all extra malware, downloaded with the help of this trojan, will certainly be wiped out, too, I’d suggest you to use GridinSoft Anti-Malware.

Glupteba removal guide
To detect and delete all malicious applications on your personal computer with GridinSoft Anti-Malware, it’s better utilize Standard or Full scan. Quick Scan is not able to find all the malicious items, because it checks only the most popular registry entries and folders.

You can observe the detected malicious programs sorted by their possible harm simultaneously with the scan process. But to perform any actions against malicious items, you need to hold on until the scan is over, or to stop the scan.
To set the action for each detected virus or unwanted program, click the arrow in front of the name of the detected trojan. By default, all malware will be moved to quarantine.
How to remove Glupteba Trojan?

Name: Glupteba
Description: Trojan Glupteba is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Glupteba trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Glupteba trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan