Backdoor

Backdoor:MSIL/Chopper.FA!dha removal

Malware Removal

The Backdoor:MSIL/Chopper.FA!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:MSIL/Chopper.FA!dha virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Backdoor:MSIL/Chopper.FA!dha?



File Info:

name: D83DEB2BA89B35E24F8A.mlw
path: /opt/CAPEv2/storage/binaries/cbb257965d3d3bb455ce83b6b42b288558be2981af9f665ea59643dc9f31c14f
crc32: 744912D7
md5: d83deb2ba89b35e24f8ac8411c4f9eea
sha1: 61c36098acb9c99b8946a633cd7b4ee212d9a4c8
sha256: cbb257965d3d3bb455ce83b6b42b288558be2981af9f665ea59643dc9f31c14f
sha512: 11264917332fc6da3af35ee56bc34349bdbeb9fe688934af0f0abfcbe68e60afda278e125c131da018d8199322d235c42d7d03ec11ad109282edebaa0e8444bd
ssdeep: 192:s2p8UqPuA8NPTRAxzfXunF96yndHcDaZZr2Twq83ItlARmHvpYkj1VC9QQn:zsJ8NPTczfenF7dHcDMZr2Twq83ItlAb
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D532B62167D491E6CDFB0F362435818163F7FB4A9F96CF8C46A5219CCD0261BD3626B2
sha3_384: 8836d206198bdcbb8dd146f3dba90eecf6fd01f9e63d594b85bf8f10ac6fa76cd1213632c96fcdd4774d1a203bf5d87b
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-02-06 11:28:59


Version Info:

Translation: 0x007f 0x04b0
Comments:  
CompanyName:  
FileDescription:  
FileVersion: 0.0.0.0
InternalName: App_Web_vh3t11na.dll
LegalCopyright:  
LegalTrademarks:  
OriginalFilename: App_Web_vh3t11na.dll
ProductName:  
ProductVersion:

Backdoor:MSIL/Chopper.FA!dha also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Chopper.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.MSIL.Chopper.A.20EB0006
FireEyeGeneric.mg.d83deb2ba89b35e2
SkyhighBehavesLike.Win32.Infected.lm
McAfeeArtemis!D83DEB2BA89B
Cylanceunsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Webshell.AA
APEXMalicious
CynetMalicious (score: 99)
KasperskyHEUR:Backdoor.MSIL.Webshell.gen
BitDefenderGeneric.MSIL.Chopper.A.20EB0006
AvastWin32:BackdoorX-gen [Trj]
EmsisoftGeneric.MSIL.Chopper.A.20EB0006 (B)
F-SecureHeuristic.HEUR/AGEN.1300030
DrWebBackDoor.WebshellNET.1
VIPREGeneric.MSIL.Chopper.A.20EB0006
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataGeneric.MSIL.Chopper.A.20EB0006
VaristW32/MSIL_Troj.BKP.gen!Eldorado
AviraHEUR/AGEN.1300030
KingsoftMSIL.Backdoor.Webshell.gen
ArcabitGeneric.MSIL.Chopper.A.20EB0006
ZoneAlarmHEUR:Backdoor.MSIL.Webshell.gen
MicrosoftBackdoor:MSIL/Chopper.FA!dha
GoogleDetected
ALYacGeneric.MSIL.Chopper.A.20EB0006
MAXmalware (ai score=86)
VBA32Backdoor.MSIL.Webshell.Heur
MalwarebytesTrojan.Chopper.Generic
TencentBackdoor.MSIL.Webshell.hb
IkarusBackdoor.MSIL.Chopper
MaxSecureTrojan.Malware.121218.susgen
FortinetMSIL/Webshell.AA!tr
AVGWin32:BackdoorX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Backdoor:MSIL/Chopper.FA!dha?

Backdoor:MSIL/Chopper.FA!dha removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment