Malware

MSIL/Asbit.R malicious file

Malware Removal

The MSIL/Asbit.R is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Asbit.R virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine MSIL/Asbit.R?



File Info:

name: 99BA14D71C33681EE711.mlw
path: /opt/CAPEv2/storage/binaries/7c445ac20e1c26c8e7548b38a461943221010d075ceb1401c8f77759ffc6f2c9
crc32: E5EF81FA
md5: 99ba14d71c33681ee7118119f911f1bd
sha1: 3968330cbbd5fc4d029b4c07b9cfabc33bdfdf70
sha256: 7c445ac20e1c26c8e7548b38a461943221010d075ceb1401c8f77759ffc6f2c9
sha512: d6448895ada845355b9dfee5daf862f2da35e874b4938bac3a7d2edf752c772a83753db8ba59503a6fbf287801f2db00bbb21a6b12801f55b505206f4d4487cf
ssdeep: 96:fK+uVj0StHZF1KwmajngrStldNx/AWZgFJt4lTisvynhW2:yPVjPZ4ajn+8ldNSW/GsanR
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T149D11915F7DC8739E9EE4F74ADD2625207B4FBA695538B9D1C84020D8D02A50CE62FB8
sha3_384: e1ddaa39897f8ab928fa099753bb7e074e64254c6117885b2e694e3eec9504db7154aa07cc121dfade3479f1b2066cf8
ep_bytes: ff250020001000000000000000000000
timestamp: 2047-04-19 04:23:46


Version Info:

Translation: 0x0000 0x04b0
Comments: dXNpbmcgU3lzdGVtLlJlZmxlY3Rpb247CnB1YmxpYyBjbGFzcyBQcm9ncmFtIHsKICAgIHB1YmxpYyBQcm9ncmFtKHN0cmluZyBzLCBwYXJhbXMgb2JqZWN0W10gYXJncyl7CiAgICAgICAgQXNzZW1ibHkuTG9hZChuZXcgU3lzdGVtLk5ldC5XZWJDbGllbnQoKS5Eb3dubG9hZERhdGEocykpLkNyZWF0ZUluc3RhbmNlKCJQcm9ncmFtIiwgdHJ1ZSwgQmluZGluZ0ZsYWdzLkNyZWF0ZUluc3RhbmNlLCBudWxsLCBhcmdzLCBudWxsLCBudWxsKTsKICAgIH0KfQ==
FileDescription: aHR0cHM6Ly9yZGxpdGUuY29tLw==
FileVersion: 1.0.0.0
InternalName: System.dll
LegalCopyright:  
OriginalFilename: System.dll
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Asbit.R also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.MSIL.Agent.a!c
Elasticmalicious (high confidence)
ClamAVWin.Packed.Cerbu-9965437-0
CAT-QuickHealPUA.MFC.S28621403
SkyhighBehavesLike.Win32.Generic.xt
McAfeeGenericRXUU-LS!99BA14D71C33
Cylanceunsafe
ZillyaTrojan.Asbit.Win32.161
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:MSIL/Asbit.d779536f
K7GWTrojan ( 00597da81 )
K7AntiVirusTrojan ( 00597da81 )
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Asbit.R
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.MSIL.Agent.gen
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
AvastWin32:TrojanX-gen [Trj]
RisingBackdoor.FastDesktop!1.E02A (CLASSIC)
F-SecureTrojan.TR/Dropper.MSIL.Gen
DrWebTrojan.DownLoaderNET.465
SophosTroj/DwnLd-AEP
IkarusTrojan.MSIL.Asbit
JiangminTrojanDownloader.MSIL.ancc
GoogleDetected
AviraTR/Dropper.MSIL.Gen
Antiy-AVLGrayWare/MSIL.Regasm.a
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmHEUR:Trojan-Downloader.MSIL.Agent.gen
VaristW32/MSIL_Tiny.AG.gen!Eldorado
AhnLab-V3Trojan/Win.Runner.R511109
Acronissuspicious
TencentTrojan.Win32.Asbit.yd
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Tedy.1448!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove MSIL/Asbit.R?

MSIL/Asbit.R removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment