Categories: Trojan

TrojanDownloader:MSIL/NanoBot.A!MTB removal tips

The TrojanDownloader:MSIL/NanoBot.A!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:MSIL/NanoBot.A!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine TrojanDownloader:MSIL/NanoBot.A!MTB?


File Info:
name: 667362442FEBCC34F5F2.mlwpath: /opt/CAPEv2/storage/binaries/eb767e99f19c8270340e24e386a8665649413a649bf31c8dfce21355a5840aaccrc32: F08F06D6md5: 667362442febcc34f5f2024b9380a757sha1: 3d4a10e1d04ab708d736f6901a44ee58f903d41fsha256: eb767e99f19c8270340e24e386a8665649413a649bf31c8dfce21355a5840aacsha512: a34b4b104886647d618f8645d33a92a4d3fcaa225734716571b6af4469ef152c9f24bbd64704363fe4bce3a32791f089553322efbf35f33ea5b25b3ab5f39aeessdeep: 384:8ceIbe8vDtgIasHViaOJxPgLi148qPk6f6qv9V5Fabb7F9RILa2MoUa4ponT3Fox:cYRjiagPa8P69Mbb7zRI8oUa4Czaxtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T136E2E93537F48222E1BD9F3AB43015048377B186E835DB4A6E1DE85E3E637D04992B63sha3_384: eb0fb48908b689f7d99d8f15bf34f8315c2e59aa2bad623ba370dbaea4ca8e3056ef050e68fcd6c4ac047d4d1ad6653eep_bytes: ff250020400000000000000000000000timestamp: 2050-11-09 14:48:20
Version Info:
Translation: 0x0000 0x04b0Comments: KeyAuth Loader ExampleCompanyName: Nelson Cybersecurity LLCFileDescription: LoaderFileVersion: 1.0.0.0InternalName: Loader.exeLegalCopyright: Copyright © KeyAuth.ccLegalTrademarks: KeyAuthOriginalFilename: Loader.exeProductName: LoaderProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

TrojanDownloader:MSIL/NanoBot.A!MTB also known as:

CyrenCloud	W32/ABRisk.CHOQ-2161:100:105:50.EB767E99!Threatlookup
Bkav	W32.Common.84C73D25
Lionic	Trojan.Win32.Crypt.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Application.Lazy.293017
FireEye	Gen:Variant.Application.Lazy.293017
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
McAfee	Artemis!667362442FEB
Malwarebytes	RiskWare.Agent
VIPRE	Gen:Variant.Application.Lazy.293017
Sangfor	Downloader.Msil.Lazy.Vzsj
K7AntiVirus	Trojan ( 005a9dfc1 )
Alibaba	Trojan:MSIL/Generic.5cae1724
K7GW	Trojan ( 005a9dfc1 )
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Trojan.Application.Lazy.D47899
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.LYE
APEX	Malicious
Cynet	Malicious (score: 99)
BitDefender	Gen:Variant.Application.Lazy.293017
Avast	Win32:TrojanX-gen [Trj]
Rising	Downloader.Agent!8.B23 (CLOUD)
Emsisoft	Gen:Variant.Application.Lazy.293017 (B)
Zillya	Downloader.Agent.Win32.516597
TrendMicro	TROJ_GEN.R002C0XEQ23
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.Win64.Agent
Avira	TR/Dldr.Agent.gleot
Antiy-AVL	RiskWare/Perhaps.HackTool
Microsoft	TrojanDownloader:MSIL/NanoBot.A!MTB
ZoneAlarm	Trojan.MSIL.Crypt.idpm
GData	Gen:Variant.Application.Lazy.293017
AhnLab-V3	Dropper/Win.Generic.C5375311
ALYac	Gen:Variant.Application.Lazy.293017
MAX	malware (ai score=78)
TrendMicro-HouseCall	TROJ_GEN.R002C0XEQ23
Tencent	Msil.Trojan-Downloader.Ader.Cwnw
Yandex	Trojan.DL.Agent!m8KQ+KaMf1E
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/HackTool
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS