Categories: Backdoor

How to remove “Backdoor:MSIL/Androm.KAAC!MTB”?

The Backdoor:MSIL/Androm.KAAC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:MSIL/Androm.KAAC!MTB virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Backdoor:MSIL/Androm.KAAC!MTB?


File Info:
name: D4FE9CA0BAA8B18233D0.mlwpath: /opt/CAPEv2/storage/binaries/37d9d25dc72449f4bbdf92bf70511684bd3819f8306f363eb1cfd6fd0e91e365crc32: 29FFE3EFmd5: d4fe9ca0baa8b18233d058024e4b6f2dsha1: 8ad7e8fa7170a579f1bad913258fd1ba793d9c1dsha256: 37d9d25dc72449f4bbdf92bf70511684bd3819f8306f363eb1cfd6fd0e91e365sha512: 6b313bee549be457b18463d7719c67b4210edab4c97de8c34772f1e15420adb4a3f40f28520e98c5897d59ebe53af4f7b7156c5e2436bcc298aa1e66b38afe2dssdeep: 12288:UN10TcOf9S4M/L/mBJMmsZbfxbPdALACmA52RghzVGjsZyxhXCz+t9h/pNKrWem2:xf9BWLGm1bOKR2hT4/XNpN0Btype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1982501986D680F16C43F97F8002013740FBAE5A9A911DF4A1EF370EBA93AFD255D4263sha3_384: 1ab14b22dff0be22c6bf2687244e22b084edc78995a5868054010059690a3d0f364ae42ac61c6a04e7991fecbe379a42ep_bytes: ff250020400000000000000000000000timestamp: 2023-07-11 06:13:16
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: TWow.exeLegalCopyright:  OriginalFilename: TWow.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Backdoor:MSIL/Androm.KAAC!MTB also known as:

Lionic	Trojan.Win32.Androm.4!c
DrWeb	Trojan.Loader.1598
MicroWorld-eScan	Trojan.GenericKD.68116428
FireEye	Generic.mg.d4fe9ca0baa8b182
CAT-QuickHeal	Trojan.GenericFC.S30550307
McAfee	GenericRXWF-XE!D4FE9CA0BAA8
Cylance	unsafe
Zillya	Backdoor.Androm.Win32.106001
Sangfor	Backdoor.Msil.Androm.Vtah
K7AntiVirus	Trojan ( 005a88521 )
Alibaba	Backdoor:MSIL/Androm.fe6f0737
K7GW	Trojan ( 005a88521 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36350.8m0@a0ANUkm
VirIT	Trojan.Win32.MSIL_Heur.A
Cyren	W32/Agent.GJW.gen!Eldorado
Symantec	Scr.Malcode!gdn34
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/GenKryptik.GLSH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
BitDefender	Trojan.GenericKD.68116428
NANO-Antivirus	Trojan.Win32.Androm.jyhuft
Avast	Win32:DropperX-gen [Drp]
Tencent	Malware.Win32.Gencirc.13e9be5f
TACHYON	Backdoor/W32.DN-Androm.987648
Sophos	Troj/Krypt-AAN
VIPRE	Trojan.GenericKD.68116428
TrendMicro	TROJ_GEN.R002C0DGK23
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Trapmine	suspicious.low.ml.score
Emsisoft	Trojan.GenericKD.68116428 (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.68116428
Webroot	W32.Trojan.Gen
Antiy-AVL	Trojan/MSIL.GenKryptik
Xcitium	Malware@#lqo1rd0nucd3
Arcabit	Trojan.Generic.D40F5FCC
ViRobot	Trojan.Win.Z.Agent.987648.E
ZoneAlarm	HEUR:Backdoor.MSIL.Androm.gen
Microsoft	Backdoor:MSIL/Androm.KAAC!MTB
Google	Detected
AhnLab-V3	Trojan/Win.PWSX-gen.C5452165
ALYac	Trojan.GenericKD.68116428
MAX	malware (ai score=82)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.MalPack.PNG
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0DGK23
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:jGEMGlakL3FgI6EPe+XyMA)
Yandex	Trojan.GenKryptik!/+ueDYDL4aY
Ikarus	Trojan.MSIL.Inject
MaxSecure	Trojan.Malware.73691364.susgen
Fortinet	MSIL/Kryptik.AGUH!tr
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.a7170a
DeepInstinct	MALICIOUS