What is “HackTool:Win32/NetCatTool!MTB”?

The HackTool:Win32/NetCatTool!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/NetCatTool!MTB virus can do?

Authenticode signature is invalid

How to determine HackTool:Win32/NetCatTool!MTB?


File Info:
name: A5A74D73FBF4A6F0B75F.mlw
path: /opt/CAPEv2/storage/binaries/4f46ef9f5543cd4ca10f4908886e78dccf77b66e5ede7de8e6ec59148309b88b
crc32: B12512D7
md5: a5a74d73fbf4a6f0b75f074de316277e
sha1: 0e0747ca4b787eb36aeeab01778fb4fd5b276b68
sha256: 4f46ef9f5543cd4ca10f4908886e78dccf77b66e5ede7de8e6ec59148309b88b
sha512: 3e41c993f86d88f7345674977cd51b161090d2c829dd6c84c7a1c5df0ca581e865e61aa423e0f6bb2de1b2a0ea27a41260559cd490029045eadd2d84d3e9314c
ssdeep: 1536:fN73r1u2oMdLz3e/wqBXG50ekkAQXRZl:fB3r8y3e4qBXUjZl
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T151538E1678C1C2BBD9C156F419758B466B37A401037042E7FF9C09DAAF633E99A3E31A
sha3_384: bee50eb6dc8840cff2480aab5825fb1c02391ea27ec909ce722e07d5fd59b6d7660f2219684b427568c3f9bc9b81d47a
ep_bytes: 6a186880c04000e869030000bf940000
timestamp: 2004-12-27 22:17:50

Version Info:
0: [No Data]

HackTool:Win32/NetCatTool!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.NetCat.1!c
AVG	FileRepMalware [PUP]
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.72580369
FireEye	Generic.mg.a5a74d73fbf4a6f0
CAT-QuickHeal	Trojan.GenericPMF.S519521
Skyhigh	Tool-NetCat.g
McAfee	Tool-NetCat.g
Cylance	unsafe
Zillya	Backdoor.Swrort.Win32.409
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Unwanted-Program ( 004a8e8a1 )
K7GW	Unwanted-Program ( 004a8e8a1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/RemoteAdmin.NetCat.AB potentially unsafe
Kaspersky	not-a-virus:HEUR:NetTool.Win32.NetCat.gen
BitDefender	Trojan.GenericKD.72580369
NANO-Antivirus	Riskware.Win32.NetCat.bdjcw
Avast	FileRepMalware [PUP]
Emsisoft	Trojan.GenericKD.72580369 (B)
DrWeb	Tool.Netcat
VIPRE	Trojan.GenericKD.72580369
TrendMicro	HackTool.Win32.Netcat.SM
Sophos	NetCat (PUA)
Jiangmin	RemoteAdmin.NetCat.av
Webroot	W32.HackTool.Gen
Varist	W32/Tool.ACIZ-5446
Antiy-AVL	Trojan[RemoteAdmin]/Win32.NetCat
Kingsoft	malware.kb.a.992
Microsoft	HackTool:Win32/NetCatTool!MTB
Xcitium	Malware@#2dvdauwhvkdjy
Arcabit	Trojan.Generic.D4537D11
ZoneAlarm	not-a-virus:HEUR:NetTool.Win32.NetCat.gen
GData	Trojan.GenericKD.72580369
Google	Detected
AhnLab-V3	Win-AppCare/Xema.61440.M
VBA32	Backdoor.Swrort
ALYac	Trojan.GenericKD.72580369
Malwarebytes	Generic.Malware.AI.DDS
Panda	HackTool/NetCat.A
Rising	HackTool.NetCat!1.BBDD (CLASSIC)
MaxSecure	Trojan.Malware.73618768.susgen
Fortinet	Riskware/NetCat
DeepInstinct	MALICIOUS
alibabacloud	Hacktool:Win/RemoteAdmin.NylLqj

How to remove HackTool:Win32/NetCatTool!MTB?

HackTool:Win32/NetCatTool!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X