Categories: Trojan

TrojanDownloader:MSIL/Dae.YA!MTB removal

The TrojanDownloader:MSIL/Dae.YA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:MSIL/Dae.YA!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine TrojanDownloader:MSIL/Dae.YA!MTB?


File Info:
name: F4A14FBBA0851B346F07.mlwpath: /opt/CAPEv2/storage/binaries/e9929d2debd712798dff64955d7224b99a633255f08b82c5ac0cf83b3f101a7acrc32: A38FA6DBmd5: f4a14fbba0851b346f072b5eaf1de1ffsha1: 299518e27eb65e8b48d9c6e734205031cab67b97sha256: e9929d2debd712798dff64955d7224b99a633255f08b82c5ac0cf83b3f101a7asha512: 2f9146e0323a2fa94f6a0676b084c4dc11f388997dc5810b264224a384217271524aa6a04a923652dcb27af16e3cf796ad0cc25d4efe517e0defc50eeee31f51ssdeep: 1536:d5wOxvgalb/pfHlqaCNPp7ieeeQNh5h22gM4444BQQQQnk:IWvguPlFCNPhieeeQNh5hj4444itype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DCE35BF2FA758111D0BE99F8C553D0303376DD124A524B47A2DC7E1F397BA098E12BAAsha3_384: 01bccdd9ce404d08e205997390eaa054375a455739abe90d7bf0214387ba0b9765f392f96296304cd5baf00be5635673ep_bytes: ff250020400000000000000000000000timestamp: 2052-08-20 09:31:06
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: WindowsApp1FileVersion: 1.0.0.0InternalName: WindowsApp1.exeLegalCopyright: Copyright ©  2018LegalTrademarks: OriginalFilename: WindowsApp1.exeProductName: WindowsApp1ProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

TrojanDownloader:MSIL/Dae.YA!MTB also known as:

Lionic	Trojan.MSIL.Blocker.4!c
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Gen:Variant.MSILHeracles.8145
Cylance	unsafe
Zillya	Trojan.Blocker.Win32.41476
K7AntiVirus	Trojan-Downloader ( 005452901 )
Alibaba	TrojanDownloader:MSIL/Blocker.92231cd0
K7GW	Trojan-Downloader ( 005452901 )
Cyren	W32/MSIL_Agent.FY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.FGW
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	Gen:Variant.MSILHeracles.8145
NANO-Antivirus	Trojan.Win32.Ransom.ftushy
MicroWorld-eScan	Gen:Variant.MSILHeracles.8145
Avast	Win32:Malware-gen
Rising	Ransom.Blocker!8.12A (CLOUD)
Emsisoft	Gen:Variant.MSILHeracles.8145 (B)
F-Secure	Trojan.TR/Blocker.gpbbz
DrWeb	Trojan.DownLoader29.13483
VIPRE	Gen:Variant.MSILHeracles.8145
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.f4a14fbba0851b34
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.MSIL.Agent
Avira	TR/Blocker.gpbbz
Antiy-AVL	Trojan[Ransom]/MSIL.Blocker
Microsoft	TrojanDownloader:MSIL/Dae.YA!MTB
Xcitium	Malware@#3pa9eclhi86yd
Arcabit	Trojan.MSILHeracles.D1FD1
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Blocker.gen
GData	Gen:Variant.MSILHeracles.8145
Google	Detected
AhnLab-V3	Trojan/Win32.Blocker.C3275416
McAfee	Artemis!F4A14FBBA085
Malwarebytes	Trojan.Banker
Panda	Trj/GdSda.A
Tencent	Malware.Win32.Gencirc.10bcf25c
Yandex	Trojan.Blocker!otRNVnB67+s
Fortinet	MSIL/Generic.AP.CEBABDE!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)