PWS:MSIL/MassLogger!MTB (file analysis)

The PWS:MSIL/MassLogger!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:MSIL/MassLogger!MTB virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PWS:MSIL/MassLogger!MTB?


File Info:
crc32: 81EE1510
md5: 7b1f3b2a2ff3e41d10b479d9bb95a811
name: 7B1F3B2A2FF3E41D10B479D9BB95A811.mlw
sha1: 79810af2372ba021e01a1dd3fe3ea7522716a7a1
sha256: d911572c2fce9e45ecf07feb9b4d407a06f0993fad6d2d9f533d06a99ba79b66
sha512: 1aa5e598e78722693928ffd1ff450877d1b3ee8d3714081472e685d97d3f2ea7ffba4b2efc9063eb285e2d1bab7ea5186589c1ee16d9621761ac74a5bf919ad0
ssdeep: 1536:zJmK7KZ7gjyMyaIlfyxFXqlbGrpcQ6WTguKmbE2bl6qbr/5u+C5r5imqVl:zdKuyMmlbGrpB6WTguxb5jb75unqN
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: Police.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: Police.exe

PWS:MSIL/MassLogger!MTB also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen10.38991
MicroWorld-eScan	Gen:Variant.Razy.772509
FireEye	Generic.mg.7b1f3b2a2ff3e41d
CAT-QuickHeal	Trojan.MsilFC.S17036455
ALYac	Gen:Variant.Razy.772509
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.MSIL.Stealer.l!c
Sangfor	Malware
K7AntiVirus	Trojan ( 0056879b1 )
BitDefender	Gen:Variant.Razy.772509
K7GW	Trojan ( 0056879b1 )
BitDefenderTheta	Gen:NN.ZemsilF.34700.im0@aiP5CEn
Cyren	W32/MSIL_Agent.BJO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PWStealer-V [Trj]
ClamAV	Win.Malware.Razy-9806344-0
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
Alibaba	TrojanSpy:MSIL/Stealer.9c1be9ce
Rising	Stealer.Agent!1.B723 (CLASSIC)
Ad-Aware	Gen:Variant.Razy.772509
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Spy.Agent.vmqzo
Zillya	Trojan.Agent.Win32.1511054
TrendMicro	TROJ_GEN.R002C0GJS20
McAfee-GW-Edition	GenericRXMK-NS!7B1F3B2A2FF3
Emsisoft	Gen:Variant.Razy.772509 (B)
Ikarus	Trojan.MSIL.Spy
Avira	TR/Spy.Agent.vmqzo
Microsoft	PWS:MSIL/MassLogger!MTB
Arcabit	Trojan.Razy.DBC99D
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Stealer.gen
GData	Gen:Variant.Razy.772509
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Wacatac.C4207833
McAfee	GenericRXMK-NS!7B1F3B2A2FF3
MAX	malware (ai score=80)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Spyware.RedLineStealer
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/Spy.Agent.CZE
TrendMicro-HouseCall	TROJ_GEN.R002C0GJS20
Tencent	Malware.Win32.Gencirc.11b099f2
Yandex	TrojanSpy.Agent!5wCAygvjt7g
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_98%
Fortinet	MSIL/Agent.CZE!tr
AVG	Win32:PWStealer-V [Trj]
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.Spy.67f

How to remove PWS:MSIL/MassLogger!MTB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

PWS:MSIL/MassLogger!MTB (file analysis)