Backdoor:MSIL/Remcos!MTB information

The Backdoor:MSIL/Remcos!MTB file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Backdoor:MSIL/Remcos!MTB virus can do?

• Freezing computer.
• New home page in browsers.
• Ads and pop-ups on desktop and browser.
• Very slow loading speed of webpages.
• Computer work slower then usual.

How to determine Backdoor:MSIL/Remcos!MTB?

General:
Operating System: Windows 7 / 8 / 8.1 / 10
Virus Name: Backdoor:MSIL/Remcos.9648d16e


File Info:
Name: ar.exe
Size: 313856
Type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5: ab47858f470352378775664f7fe99ebe
SHA1: 38676a3f8d7473ba9019c30961d06fd51d0e022d
SH256: 19a82dedbef2738e082bf052a81f1af19610f2478b7ee9502749ad185dfee215
 
Version Info:
 [No Data] 

Backdoor:MSIL/Remcos!MTB also known as:

ALYac	Gen:Variant.Razy.577898
APEX	Malicious
Ad-Aware	Gen:Variant.Razy.577898
AhnLab-V3	Trojan/Win32.AgentTesla.C3468286
Alibaba	Backdoor:MSIL/Remcos.9648d16e
Arcabit	Trojan.Razy.D8D16A
Avira	TR/Dropper.Gen
BitDefender	Gen:Variant.Razy.577898
BitDefenderTheta	Gen:NN.ZemsilF.32245.tm0@ayVkfW
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.f8d747
Cyren	W32/Azorult.D.gen!Eldorado
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
Endgame	malicious (high confidence)
F-Secure	Trojan.TR/Dropper.Gen
FireEye	Generic.mg.ab47858f47035237
GData	Gen:Variant.Razy.577898
Invincea	heuristic
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
MAX	malware (ai score=100)
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
MicroWorld-eScan	Gen:Variant.Razy.577898
Microsoft	Backdoor:MSIL/Remcos!MTB
Qihoo-360	HEUR/QVM03.0.265D.Malware.Gen
Rising	Spyware.AgentTesla!1.B864 (CLASSIC)
SentinelOne	DFI – Malicious PE
Symantec	ML.Attribute.HighConfidence
Trapmine	malicious.high.ml.score
VBA32	TScope.Trojan.MSIL
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
eGambit	Unsafe.AI_Score_99%

How to remove Backdoor:MSIL/Remcos!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.