Backdoor.MSIL.Phny removal

The Backdoor.MSIL.Phny is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.MSIL.Phny virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Backdoor.MSIL.Phny?


File Info:
crc32: EE93C2C0
md5: e7773b384714334ccac69b6a678eec17
name: E7773B384714334CCAC69B6A678EEC17.mlw
sha1: 6f079deb09f4cad8cc4ca6def4d1b464e36dcf99
sha256: 1e1dd17f8fa917db107b3b9be769996df76bff1aa68e8535a02522de14c0a166
sha512: 9a64d15b40fde476d80d337c6350f9fa6866692d6580b420a8cd3c492e08739df4f53ac44bb455031f42725c53c2e90931d03182674d7ab0ce5d929018d5d93a
ssdeep: 6144:9PKYsc2JKw50OkkeoWMMxAc6LE6eLdzTfCmWmev4i:9ylc28w5rkkR2hCSLdzfewi
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: zzz.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: zzz.exe

Backdoor.MSIL.Phny also known as:

Lionic	Trojan.MSIL.Phny.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader5.3884
McAfee	GenericRXJG-MD!E7773B384714
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:MSIL/Injector.d70775bc
K7GW	Trojan ( 004f85b71 )
K7AntiVirus	Trojan ( 004f85b71 )
ESET-NOD32	a variant of MSIL/Injector.QFY
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.Phny.gen
MicroWorld-eScan	Gen:Heur.MSIL.Bladabindi.1
Tencent	Malware.Win32.Gencirc.114d8248
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dropper.Gen
BitDefenderTheta	Gen:NN.ZemsilF.34266.qm1@a03FQbb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PKF21
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
FireEye	Generic.mg.e7773b384714334c
Emsisoft	Gen:Heur.MSIL.Bladabindi.1 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_99%
Arcabit	Trojan.MSIL.Bladabindi.1
AhnLab-V3	Malware/Win32.RL_Generic.C4214305
VBA32	Backdoor.MSIL.Phny
MAX	malware (ai score=99)
Panda	Trj/GdSda.A
Yandex	Trojan.Injector!rYGZJwOCIFk
Ikarus	Trojan.MSIL.Injector
Fortinet	MSIL/Generic.AP.E781C94!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Backdoor.MSIL.Phny?

Backdoor.MSIL.Phny removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X