Backdoor

What is “Backdoor.MSIL.Crysan.bxl”?

Malware Removal

The Backdoor.MSIL.Crysan.bxl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.MSIL.Crysan.bxl virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Backdoor.MSIL.Crysan.bxl?


File Info:

crc32: 8498B39C
md5: 722603aa75534bec9d1191f062fb2c03
name: 722603AA75534BEC9D1191F062FB2C03.mlw
sha1: 321ea5aa8368f394dcbdcc6ce7ebaab89861150d
sha256: 3e7cecddd88f1fdc8eb055ef6ab1eacfadb706582cb0fe190d99e493baa78691
sha512: 04e83e82740789a1d65f26c68076b1ac8b183f378d8f9f58ce8fba55f26276edf4058abdebeabf7b9d37432a64671021a30450e136c736cad57f06a7953e5fb3
ssdeep: 192:9DPhbcIbsHy0369P99j999M99Du999W999969999939999p99999799999A9999:9DZcIISYI3G
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2021
Assembly Version: 1.0.0.0
InternalName: NORD VPN.exe
FileVersion: 1.0.0.0
CompanyName: NORD VPN
LegalTrademarks:
Comments: NORD VPN
ProductName: NORD VPN
ProductVersion: 1.0.0.0
FileDescription: NORD VPN
OriginalFilename: NORD VPN.exe

Backdoor.MSIL.Crysan.bxl also known as:

AlibabaBackdoor:MSIL/Crysan.691c2ce0
Cybereasonmalicious.a8368f
APEXMalicious
AvastWin32:Malware-gen
KasperskyBackdoor.MSIL.Crysan.bxl
BitDefenderThetaGen:NN.ZemsilF.34738.bm0@a4d2std
KingsoftWin32.Hack.MSIL.b.(kcloud)
ZoneAlarmBackdoor.MSIL.Crysan.bxl
AhnLab-V3Malware/Win.Malware-gen.C4521369
MalwarebytesBackdoor.AsyncRAT
AVGWin32:Malware-gen

How to remove Backdoor.MSIL.Crysan.bxl?

Backdoor.MSIL.Crysan.bxl removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment