Categories: Backdoor

Backdoor:MSIL/Crysan.RAN!MTB malicious file

The Backdoor:MSIL/Crysan.RAN!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:MSIL/Crysan.RAN!MTB virus can do?

  • Network activity detected but not expressed in API logs

How to determine Backdoor:MSIL/Crysan.RAN!MTB?


File Info:

crc32: 160B92EFmd5: 34beff3709d805935e6030f2b01cebf7name: upload_filesha1: 00ba4cd203a5b296bb36c4bc57a885e7f1e8fe5asha256: f07ee748e62dd95a28d41501e53589c92e191f62568cc825938a43cf5250db3csha512: 64270d3abec7825aa74b7a775be82cf60904ac86662bf6041dffd62c110442838467762cac72253a210c90801a9ef1e83a79b363fbcb11e5a94fb9c85862c703ssdeep: 6144:a15i+5/lz7DRokeo8ZfyLMdXjLRtm0iCgaCiffY52VYzR8WODSfuRLotRyV:+/lN1gHxjLqbUfYyYzybeyXtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0LegalCopyright: Assembly Version: 1.0.0.0InternalName: Stub12.exeFileVersion: 1.0.0.0CompanyName: LegalTrademarks: Comments: ProductName: ProductVersion: 1.0.0.0FileDescription: OriginalFilename: Stub12.exe

Backdoor:MSIL/Crysan.RAN!MTB also known as:

Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.34783353
ALYac Trojan.GenericKD.34783353
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.MSIL.Crysan.m!c
Sangfor Malware
CrowdStrike win/malicious_confidence_80% (W)
BitDefender Trojan.GenericKD.34783353
K7GW Trojan ( 005710e91 )
K7AntiVirus Trojan ( 005710e91 )
TrendMicro TROJ_GEN.R002C0PJF20
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast Win32:CoinminerX-gen [Trj]
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
Alibaba Backdoor:MSIL/Kryptik.ee6f5a79
ViRobot Trojan.Win32.Z.Malpack.644096
Tencent Msil.Backdoor.Crysan.Lkoc
Ad-Aware Trojan.GenericKD.34783353
Emsisoft Trojan.GenericKD.34783353 (B)
F-Secure Trojan.TR/Kryptik.uqybw
DrWeb BackDoor.SpyBotNET.25
Invincea Mal/Generic-S
McAfee-GW-Edition PWS-FCQR!34BEFF3709D8
FireEye Generic.mg.34beff3709d80593
Sophos Mal/Generic-S
Webroot W32.Trojan.Gen
Avira TR/Kryptik.uqybw
MAX malware (ai score=80)
Microsoft Backdoor:MSIL/Crysan.RAN!MTB
Arcabit Trojan.Generic.D212C079
ZoneAlarm HEUR:Backdoor.MSIL.Crysan.gen
GData Trojan.GenericKD.34783353
McAfee PWS-FCQR!34BEFF3709D8
Malwarebytes Trojan.MalPack.Caesar
Panda Trj/GdSda.A
Zoner Trojan.Win32.95890
ESET-NOD32 a variant of MSIL/Kryptik.YEU
TrendMicro-HouseCall TROJ_GEN.R002C0PJF20
Ikarus Trojan.MSIL.Crypt
Fortinet MSIL/GenKryptik.EUAB!tr
BitDefenderTheta Gen:NN.ZemsilF.34570.Nm0@aGJFvoi
AVG Win32:CoinminerX-gen [Trj]
Paloalto generic.ml
Qihoo-360 Generic/Backdoor.c00

How to remove Backdoor:MSIL/Crysan.RAN!MTB?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “Win32/Agent.ACHK” infection

The Win32/Agent.ACHK is considered dangerous by lots of security experts. When this infection is active,…

3 mins ago

Fragtor.503243 removal tips

The Fragtor.503243 is considered dangerous by lots of security experts. When this infection is active,…

9 mins ago

Graftor.591541 removal instruction

The Graftor.591541 is considered dangerous by lots of security experts. When this infection is active,…

13 mins ago

Trojan.Generic.35648740 removal guide

The Trojan.Generic.35648740 is considered dangerous by lots of security experts. When this infection is active,…

29 mins ago

Win32/Kryptik.BXRP removal guide

The Win32/Kryptik.BXRP is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Should I remove “Malware.AI.1377015632”?

The Malware.AI.1377015632 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago