Categories: Backdoor

How to remove “Backdoor:MSIL/AsyncRAT.F!MTB”?

The Backdoor:MSIL/AsyncRAT.F!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:MSIL/AsyncRAT.F!MTB virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Backdoor:MSIL/AsyncRAT.F!MTB?


File Info:
name: E747E0708439B7136459.mlwpath: /opt/CAPEv2/storage/binaries/30c5c71d0d36e832b002b267e069bdd7a4cdc073e46a8f4707eced1e660549b9crc32: 215C8417md5: e747e0708439b7136459abd3e8e5ac45sha1: 8c0b9c294cf6c79930a96d97f1b3d4f84d98f4aesha256: 30c5c71d0d36e832b002b267e069bdd7a4cdc073e46a8f4707eced1e660549b9sha512: a8faf1039ceeb36f059d809b53dd704b9f61ebe07fb29d5596c75d19a8ebac06b1a260a1403a3989a73d635b8995ff2b598fe46cd582d3246578ab6c9e3de93fssdeep: 12288:vJalb9FIN60xmy9/CinsYf9QbDM5E7cH9bzYEbq3NLG28Fx:vJsIJZHDVJ+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T121E4382439FA501AB173EFAA4BE479DADA6FB7733B07645D109003864723981DEC253Esha3_384: 9b596e7ce1eff9badaf88c67a6b327eaca9d7816384cb84a5ce4e44577b7292ffb31be6e9f5b42c6a90e69c0c0c27dfbep_bytes: ff250020400000000000000000000000timestamp: 2022-09-08 08:22:49
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: 2_1.exeLegalCopyright:  OriginalFilename: 2_1.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Backdoor:MSIL/AsyncRAT.F!MTB also known as:

Bkav	W32.AIDetectMalware.CS
AVG	Win32:DropperX-gen [Drp]
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDropNET.4
MicroWorld-eScan	Gen:Variant.Barys.712
FireEye	Generic.mg.e747e0708439b713
Skyhigh	BehavesLike.Win32.Generic.jt
McAfee	GenericRXDQ-CI!E747E0708439
Malwarebytes	Backdoor.Agent.PGen
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 004561691 )
Alibaba	Trojan:MSIL/DropperX.fb88b1d5
K7GW	Trojan ( 004561691 )
BitDefenderTheta	Gen:NN.ZemsilF.36802.Om0@aivVs2e
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDropper.Small.AM
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Barys.712
NANO-Antivirus	Trojan.Win32.Small.dchwtm
Tencent	Malware.Win32.Gencirc.13b7ef06
Emsisoft	Gen:Variant.Barys.712 (B)
F-Secure	Trojan.TR/Dropper.Gen
VIPRE	Gen:Variant.Barys.712
TrendMicro	TROJ_GEN.R002C0DDH24
Trapmine	malicious.moderate.ml.score
Sophos	Troj/MSIL-JHR
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
MAX	malware (ai score=81)
Antiy-AVL	Trojan[Dropper]/MSIL.Small
Kingsoft	malware.kb.c.1000
Microsoft	Backdoor:MSIL/AsyncRAT.F!MTB
Arcabit	Trojan.Barys.712
ViRobot	Trojan.Win32.Z.Small.658432
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Barys.712
Google	Detected
AhnLab-V3	Trojan/Win32.RL_Generic.C4303696
ALYac	Gen:Variant.Barys.712
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DDH24
Rising	Malware.Obfus/MSIL@AI.97 (RDM.MSIL2:sOVdEHhR1WhcTBgVIEqjog)
Ikarus	Trojan-Dropper.MSIL.Small
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Small.AM!tr
DeepInstinct	MALICIOUS
alibabacloud	Backdoor:MSIL/AsyncRAT.F!MTB