Backdoor

Backdoor:MSIL/Webshell.BB!MTB information

Malware Removal

The Backdoor:MSIL/Webshell.BB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:MSIL/Webshell.BB!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Backdoor:MSIL/Webshell.BB!MTB?



File Info:

name: C95C03E8D477C2016140.mlw
path: /opt/CAPEv2/storage/binaries/7ab765e3a8c0a2db75b55622d1346f296ef0b62a2b5b9d3cce55708933a67a11
crc32: A55F651B
md5: c95c03e8d477c2016140683cb37a402a
sha1: bb07bef473b3547eda2b6e044c55dea0fe4c0aed
sha256: 7ab765e3a8c0a2db75b55622d1346f296ef0b62a2b5b9d3cce55708933a67a11
sha512: c281b6d9fa4a3676495e566a37d627a31a34bff04089d73d2ed6ae5fbddae5d289a63b2688f9337ec153d564c67260b6129d598e7ded370e5203f70d11138258
ssdeep: 384:vSZS4uAfLeML1gVIWTpTmxOtKX7Lt4TyLt:vS7fLDpab9KxOtKney
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T18162D51FAB88CD23C7BB933657B69608D4769A031656CB0EBDECA5CA1F732144252FC4
sha3_384: 2909423253e84cdf9927026c906e21a47fc54bc34d6b04a84cc96a842ba51fb958631712d1fe8b60b83eb9ff9b75b660
ep_bytes: ff250020001000000000000000000000
timestamp: 2024-02-28 18:16:08


Version Info:

0: [No Data]

Backdoor:MSIL/Webshell.BB!MTB also known as:

BkavW32.AIDetectMalware.CS
Elasticmalicious (high confidence)
DrWebBackDoor.WebshellNET.9
MicroWorld-eScanGen:Variant.MSILHeracles.92481
McAfeeArtemis!C95C03E8D477
ZillyaTrojan.Webshell.Win32.17295
K7GWTrojan ( 005b19ee1 )
K7AntiVirusTrojan ( 005b19ee1 )
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Webshell.EV
ClamAVWin.Packed.Webshell-10016062-0
KasperskyHEUR:Backdoor.MSIL.WebShell.gen
BitDefenderGen:Variant.MSILHeracles.92481
AvastWin32:BackdoorX-gen [Trj]
EmsisoftGen:Variant.MSILHeracles.92481 (B)
F-SecureTrojan.TR/Dropper.MSIL.Gen
VIPREGen:Variant.MSILHeracles.92481
FireEyeGen:Variant.MSILHeracles.92481
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=82)
GDataMSIL.Trojan.PSE.14W6LGL
GoogleDetected
AviraTR/Dropper.MSIL.Gen
VaristW32/WebShell.E.gen!Eldorado
ArcabitTrojan.MSILHeracles.D16941
ZoneAlarmHEUR:Backdoor.MSIL.WebShell.gen
MicrosoftBackdoor:MSIL/Webshell.BB!MTB
AhnLab-V3Backdoor/Win.WEBSHELL.C5557105
ALYacGen:Variant.MSILHeracles.92481
MalwarebytesTrojan.WebShell.MSIL
IkarusTrojan.MSIL.Webshell
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Webshell.EE!tr
AVGWin32:BackdoorX-gen [Trj]

How to remove Backdoor:MSIL/Webshell.BB!MTB?

Backdoor:MSIL/Webshell.BB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment