Backdoor

Backdoor:MSIL/Revetrat.A!bit malicious file

Malware Removal

The Backdoor:MSIL/Revetrat.A!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:MSIL/Revetrat.A!bit virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Backdoor:MSIL/Revetrat.A!bit?


File Info:

crc32: 3904B321
md5: 63de83a16c0bcd7397ce60a5b35c6324
name: Client_Protected.jpg
sha1: c874069425deced7df4593ceb869382068c562a8
sha256: 2c59fdaaa82b41789e1a99f7d818b543ed1333c140c3563a93a5a0fecd7ce8b1
sha512: 0f9dae80122ac2e7b90672ab87acc38073ec22c9857316007c4e91a66a7d95387d8cf9f4fa376d42d52616b28176a48e35f12ca919c4498e277cc3069cbcabd9
ssdeep: 3072:1g5oTkGQTpPLE2SisngzPt0Z9oJGOp2lHlZ0D0:ZiRLE2SiiyPeoPpgHlZ0D
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Backdoor:MSIL/Revetrat.A!bit also known as:

DrWebTrojan.MulDrop11.29748
MicroWorld-eScanTrojan.GenericKD.42188809
FireEyeGeneric.mg.63de83a16c0bcd73
CAT-QuickHealTrojan.Nanotesla
Qihoo-360HEUR/QVM03.0.FE07.Malware.Gen
ALYacTrojan.GenericKD.42188809
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0055c2061 )
BitDefenderTrojan.GenericKD.42188809
K7GWTrojan ( 0055c2061 )
Cybereasonmalicious.425dec
Invinceaheuristic
BitDefenderThetaGen:NN.ZemsilF.34100.hiW@aGFTDbi
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
GDataTrojan.GenericKD.42188809
KasperskyHEUR:Trojan.MSIL.Skeeyah.gen
AlibabaTrojan:Win32/darker.ali1000147
NANO-AntivirusTrojan.Win32.Kryptik.gnzhoj
AegisLabTrojan.Win32.Malicious.4!c
TencentWin32.Trojan.Inject.Auto
Ad-AwareTrojan.GenericKD.42188809
SophosMal/Generic-S
ComodoMalware@#jney9caaa52i
F-SecureHeuristic.HEUR/AGEN.1045442
ZillyaTrojan.Kryptik.Win32.1896899
TrendMicroTROJ_GEN.R002C0DA420
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.42188809 (B)
IkarusTrojan.Agent
CyrenW32/Trojan.KSDN-1125
JiangminTrojan.MSIL.nwry
AviraHEUR/AGEN.1045442
Antiy-AVLTrojan/MSIL.Skeeyah
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D283C009
ZoneAlarmHEUR:Trojan.MSIL.Skeeyah.gen
MicrosoftBackdoor:MSIL/Revetrat.A!bit
AhnLab-V3Malware/Win32.RL_Generic.C3608977
Acronissuspicious
McAfeeRDN/Generic.hbg
MAXmalware (ai score=88)
VBA32TScope.Trojan.MSIL
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.TVN
TrendMicro-HouseCallTROJ_GEN.R002C0DA420
RisingBackdoor.Revetrat!8.E4C1 (CLOUD)
YandexTrojan.AvsArher.bSFjrR
FortinetMSIL/Kryptik.TVN!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Backdoor:MSIL/Revetrat.A!bit?

Backdoor:MSIL/Revetrat.A!bit removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment