Malware

MSIL/Asbit.R information

Malware Removal

The MSIL/Asbit.R is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Asbit.R virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine MSIL/Asbit.R?



File Info:

name: 6B5C886AECCC94B80DF8.mlw
path: /opt/CAPEv2/storage/binaries/328c9f29abac49f3d3aa39bf655fa8a78c87379f26c59428313ae216c20bdd84
crc32: F8C2ECC7
md5: 6b5c886aeccc94b80df8ea6bb9a21273
sha1: 764a2fa71086d03ba895dbfd4ab5eb22de7b3eb6
sha256: 328c9f29abac49f3d3aa39bf655fa8a78c87379f26c59428313ae216c20bdd84
sha512: c1a2ab1363774ca40f9fa97f3db1c064a4aca2fe504e38707f000503f3816b389127c042be1fbc337f5f2fa57f494e141b5bb17828efccf9eb2afa05d779f544
ssdeep: 96:F/YuobqicU0rcDaj6g0PG3tldNxQApZxk1sJt4lTisvynhW2:F/vobcU0QDaj6d+ldNpprIVGsanR
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T154D1DA16B6DC5739DADE4FB06CD662C207B4F7B2A4125B9D1C84020D5E02750CEB2FB5
sha3_384: acd275a168e14668c4b8eb12db73e9d8f3ad683f58eafe2b36d537ccc02232791200c169b13faaf28b0836a0c71e3019
ep_bytes: ff250020001000000000000000000000
timestamp: 2049-05-10 06:31:34


Version Info:

Translation: 0x0000 0x04b0
Comments: dXNpbmcgU3lzdGVtLlJlZmxlY3Rpb247CnB1YmxpYyBjbGFzcyBQcm9ncmFtIHsKICAgIHB1YmxpYyBQcm9ncmFtKHN0cmluZyBzLCBwYXJhbXMgb2JqZWN0W10gYXJncyl7CiAgICAgICAgQXNzZW1ibHkuTG9hZChuZXcgU3lzdGVtLk5ldC5XZWJDbGllbnQoKS5Eb3dubG9hZERhdGEocykpLkNyZWF0ZUluc3RhbmNlKCJQcm9ncmFtIiwgdHJ1ZSwgQmluZGluZ0ZsYWdzLkNyZWF0ZUluc3RhbmNlLCBudWxsLCBhcmdzLCBudWxsLCBudWxsKTsKICAgIH0KfQ==
FileDescription: aHR0cHM6Ly9yZGxpdGUuY29tLw==
FileVersion: 1.0.0.0
InternalName: System.dll
LegalCopyright:  
OriginalFilename: System.dll
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Asbit.R also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Asbit.a!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoaderNET.465
CAT-QuickHealPUA.MFC.S28621403
SkyhighBehavesLike.Win32.Generic.xt
McAfeeGenericRXUB-IG!6B5C886AECCC
Cylanceunsafe
ZillyaTrojan.Asbit.Win32.162
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 00597da81 )
AlibabaTrojanDownloader:MSIL/Asbit.9fdf641c
K7GWTrojan ( 00597da81 )
CrowdStrikewin/malicious_confidence_100% (W)
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Asbit.R
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Cerbu-9965437-0
KasperskyHEUR:Trojan-Downloader.MSIL.Agent.gen
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Asbit.yd
F-SecureTrojan.TR/Dropper.MSIL.Gen
TrendMicroTROJ_GEN.R002C0PAA24
SophosTroj/DwnLd-AEP
IkarusTrojan.MSIL.Asbit
JiangminTrojanDownloader.MSIL.ancb
VaristW32/MSIL_Tiny.AG.gen!Eldorado
AviraTR/Dropper.MSIL.Gen
Antiy-AVLGrayWare/MSIL.Regasm.a
MicrosoftTrojan:Win32/Wacatac.B!ml
ViRobotTrojan.Win32.Z.Cerbu.6656.ORU
ZoneAlarmHEUR:Trojan-Downloader.MSIL.Agent.gen
GDataWin32.Trojan.Agent.G141W2
GoogleDetected
AhnLab-V3Trojan/Win.TrojanX-gen.R512047
Acronissuspicious
VBA32Trojan.MSIL.RdLoader.Heur
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PAA24
RisingBackdoor.FastDesktop!1.E02A (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.187020364.susgen
FortinetMSIL/Tedy.1448!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove MSIL/Asbit.R?

MSIL/Asbit.R removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment