Backdoor

About “Backdoor.MsilFC.S13564499” infection

Malware Removal

The Backdoor.MsilFC.S13564499 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.MsilFC.S13564499 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Backdoor.MsilFC.S13564499?


File Info:

crc32: CBC69C58
md5: 841cecd801172a5c1e7c8329592a9661
name: 841CECD801172A5C1E7C8329592A9661.mlw
sha1: f644250531e9463d519a6506ad6ddf87178448f6
sha256: 05030526532dbe4d0a3e49140489439468957d6dea9f482ff983e778b21c61d0
sha512: 891996d76d96ee09c940fa5e01dbc88c3fac0f691a411006a6247fc0afaee21017e7a0e1a9ef669d6635d434963ead27bb490fb8d19637be5da6413d147ae2fe
ssdeep: 768:NxGPMZGIoNEdqc5UZdLvOr3ls1Rz68x26XC2yjbFgr3izhgBkR8CqBmdAslClZB:NxGPMZFo0r1YhRebCrSzGBkRfymdAZr
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: Stub.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: Stub.exe

Backdoor.MsilFC.S13564499 also known as:

K7AntiVirusTrojan ( 005678321 )
Elasticmalicious (high confidence)
DrWebBackDoor.AsyncRATNET.1
CynetMalicious (score: 100)
CAT-QuickHealBackdoor.MsilFC.S13564499
ALYacGen:Variant.Razy.679304
CylanceUnsafe
ZillyaTrojan.Agent.Win32.1215242
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 005678321 )
Cybereasonmalicious.801172
CyrenW32/MSIL_Troj.UP.gen!Eldorado
ESET-NOD32a variant of MSIL/Agent.CFQ
APEXMalicious
AvastWin32:DropperX-gen [Drp]
ClamAVWin.Packed.Samas-7998113-0
KasperskyHEUR:Backdoor.MSIL.Crysan.gen
BitDefenderGen:Variant.Razy.679304
SUPERAntiSpywareBackdoor.NyanWorm/Variant
MicroWorld-eScanGen:Variant.Razy.679304
Ad-AwareGen:Variant.Razy.679304
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34690.cm0@auG8Nui
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Fareit.pm
FireEyeGeneric.mg.841cecd801172a5c
EmsisoftGen:Variant.Razy.679304 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.MSIL.cwot
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.3064DCA
MicrosoftTrojan:MSIL/Ursu
ArcabitTrojan.Razy.DA5D88
GDataMSIL.Trojan.PSE.1DQ5TRK
AhnLab-V3Malware/Win32.RL_Generic.C3558490
McAfeeFareit-FZT!841CECD80117
MAXmalware (ai score=82)
VBA32TScope.Trojan.MSIL
MalwarebytesBackdoor.AsyncRAT.MSIL.Generic
PandaTrj/GdSda.A
RisingBackdoor.AsyncRAT!1.C3F4 (C64:YzY0OiFDxbvj8ylj)
YandexTrojan.Agent!c5hQWL0honw
IkarusTrojan.MSIL.Agent
MaxSecureTrojan.Malware.74418669.susgen
FortinetMSIL/CoinMiner.CFQ!tr
AVGWin32:DropperX-gen [Drp]

How to remove Backdoor.MsilFC.S13564499?

Backdoor.MsilFC.S13564499 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment