Backdoor:MSIL/NanoBot.PA!MTB removal instruction

The Backdoor:MSIL/NanoBot.PA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:MSIL/NanoBot.PA!MTB virus can do?

How to determine Backdoor:MSIL/NanoBot.PA!MTB?


File Info:
crc32: 331186E7
md5: 4489fd37c65d9c09b175fbe1352969a9
name: upload_file
sha1: 46e84e93acf430d6b0a07566425b7b3a2280ff5b
sha256: 3b42acf9ca31858d0add648edbb6161182df8c42eaa3d1bc2a4efbf52da344dc
sha512: 668b4affdab1a1a7d084cef8f61c4fb5ccee02b5fb9e41471e738a3fdcd6a30957fb0940a1d7a8d57ced54635445245f45efd48151f732f326e1b0122a32dba8
ssdeep: 6144:NPahCZg9v1NMM5yaq6W8mTEqbr5Kk1MQzDMxMSPqRFsB+ectgEY09q:NPa4ZQtNDyaq6GTjbtB1MUDMxunteLEQ
type: RAR archive data, vb0,

Version Info:
0: [No Data]

Backdoor:MSIL/NanoBot.PA!MTB also known as:

MicroWorld-eScan	Trojan.GenericKD.34701522
FireEye	Trojan.GenericKD.34701522
McAfee	Artemis!4489FD37C65D
Malwarebytes	Trojan.Crypt.MSIL.Generic
Sangfor	Malware
TrendMicro	Backdoor.MSIL.ANDROM.THJOGBO
Cyren	W32/MSIL_Troj.YW.gen!Eldorado
Symantec	Trojan.Gen.NPE
Avast	Win32:DangerousSig [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
BitDefender	Trojan.GenericKD.34701522
NANO-Antivirus	Trojan.Win32.Androm.hzazxi
AegisLab	Trojan.MSIL.Androm.m!c
Ad-Aware	Trojan.GenericKD.34701522
Sophos	Mal/Generic-S
Comodo	Malware@#1vxjrr7t2uvwp
F-Secure	Trojan.TR/Kryptik.yvnfu
Invincea	Mal/Generic-S
Emsisoft	Trojan.GenericKD.34701522 (B)
Ikarus	Trojan.MSIL.Krypt
Avira	TR/Kryptik.yvnfu
MAX	malware (ai score=82)
Microsoft	Backdoor:MSIL/NanoBot.PA!MTB
Arcabit	Trojan.Generic.D21180D2
ZoneAlarm	HEUR:Backdoor.MSIL.Androm.gen
GData	Win32.Backdoor.AMRat.FD18FW
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.MSIL.R352000
BitDefenderTheta	Gen:NN.ZemsilF.34298.4m1@ay3h8Jfi
ESET-NOD32	a variant of MSIL/GenKryptik.ESKP
Yandex	Trojan.Igent.bUz2qv.8
SentinelOne	DFI – Malicious Archive
Fortinet	MSIL/GenKryptik.ESHC!tr
AVG	Win32:DangerousSig [Trj]
Qihoo-360	Generic/Backdoor.9cf

How to remove Backdoor:MSIL/NanoBot.PA!MTB?

Backdoor:MSIL/NanoBot.PA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X