Backdoor:MSIL/Crysen.S!MTB malicious file

The Backdoor:MSIL/Crysen.S!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:MSIL/Crysen.S!MTB virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor:MSIL/Crysen.S!MTB?


File Info:
crc32: 5427847E
md5: 96f0c8f1a33c43d604ef2c5da04b265f
name: 96F0C8F1A33C43D604EF2C5DA04B265F.mlw
sha1: 0c94eff96f0a73148b211ef2b9f6d8e7dceb207a
sha256: 27a94c87f4b07df5acd165f909865389422fd0a2c216347ed2a04ffb858bdcef
sha512: fb4b4a0b562cb9e897ee42e5a8353d9b02c588c73a617fe7418d9efe257426baf55251c0dc48636f8bee1ef17147f3c289cad1eb6c78f1f8d6563b1245b98d82
ssdeep: 1536:uo8cXMx60oq/Kgqbx9P3A+x6NfrbWmVcl:uo3XMx60Ty/bx99x+nW8Y
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 2019 ZooL Smith
Assembly Version: 2.5.0.0
InternalName: migi.exe
FileVersion: 2.5.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: MIGI
ProductVersion: 2.5.0.0
FileDescription: MIGI - Multiple Items_Game Includer
OriginalFilename: migi.exe

Backdoor:MSIL/Crysen.S!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.576379
FireEye	Generic.mg.96f0c8f1a33c43d6
ALYac	Gen:Variant.Razy.576379
Malwarebytes	Backdoor.AsyncRAT.MSIL.Generic
Sangfor	Malware
K7AntiVirus	Trojan ( 005678321 )
Alibaba	Backdoor:MSIL/Crysen.5210f12a
K7GW	Trojan ( 005678321 )
CrowdStrike	win/malicious_confidence_80% (D)
BitDefenderTheta	Gen:NN.ZemsilF.34688.dm0@aicQzel
Cyren	W32/MSIL_Ransom.D.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0DLD20
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
BitDefender	Gen:Variant.Razy.576379
Paloalto	generic.ml
AegisLab	Trojan.MSIL.Crysan.m!c
APEX	Malicious
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
Ad-Aware	Gen:Variant.Razy.576379
Sophos	Mal/Generic-S
Comodo	Malware@#no41ijxylbz5
F-Secure	Heuristic.HEUR/AGEN.1121262
DrWeb	BackDoor.SiggenNET.5
TrendMicro	TROJ_GEN.R002C0DLD20
McAfee-GW-Edition	Fareit-FZT!96F0C8F1A33C
Emsisoft	Gen:Variant.Razy.576379 (B)
Ikarus	Trojan.MSIL.Agent
Jiangmin	Backdoor.MSIL.cvzp
Avira	HEUR/AGEN.1121262
MAX	malware (ai score=85)
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Backdoor:MSIL/Crysen.S!MTB
Arcabit	Trojan.Razy.D8CB7B
ViRobot	Trojan.Win32.Z.Razy.50688.HZ
ZoneAlarm	HEUR:Backdoor.MSIL.Crysan.gen
GData	Gen:Variant.Razy.576379
Cynet	Malicious (score: 90)
AhnLab-V3	Trojan/Win32.RL_Agent.C4095563
McAfee	Fareit-FZT!96F0C8F1A33C
Cylance	Unsafe
ESET-NOD32	a variant of MSIL/Agent.CFQ
Tencent	Msil.Backdoor.Crysan.Hwmi
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Agent.CFQ!tr
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.96f0a7
Panda	Trj/GdSda.A
Qihoo-360	Generic/Backdoor.c00

How to remove Backdoor:MSIL/Crysen.S!MTB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor:MSIL/Crysen.S!MTB malicious file