Trojan

Trojan:MSIL/Formbook.AMBA!MTB removal instruction

Malware Removal

The Trojan:MSIL/Formbook.AMBA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/Formbook.AMBA!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:MSIL/Formbook.AMBA!MTB?



File Info:

name: 31AAE5315E22B4B0A36E.mlw
path: /opt/CAPEv2/storage/binaries/e5153afa7906ff0209b8e8d75efd13b0bdd90775f4c38ca92542367af9fe2c04
crc32: 9D7298D5
md5: 31aae5315e22b4b0a36ed9d19044dbf9
sha1: 1b6bf8b6290804748557d67698c82fa362844604
sha256: e5153afa7906ff0209b8e8d75efd13b0bdd90775f4c38ca92542367af9fe2c04
sha512: 0ea021258d9cd7357d104c646e6614c2aa323d1d82fb7b7ce880d129482622c07da911070b160ab3a3469b37ab03a97580c726d6300dc0a460b32453940c9776
ssdeep: 12288:tLWs2iNte2BOYbcHJg907OXExEFBeBVpizgxeEZ0gCgFsdaQglcEjuW:91HsHHbFEf0+HEZ0gaIQTW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FBF4F1A83D6849E3C27D28F4C01945811BB163A6266EF3C91FC33ACA65E3FD587D2197
sha3_384: dd649cedaf73285262e7ffeab5a3c25265ded9e34a6e601f3a53774716d6d4f9caaaab0a0f50f3adb785f4b0ac03699c
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-09-20 09:01:02


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 20 Questions
FileVersion: 1.0.0.0
InternalName: fLq.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: fLq.exe
ProductName: 20 Questions
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan:MSIL/Formbook.AMBA!MTB also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Taskun.4!c
AVGWin32:PWSX-gen [Trj]
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Lazy.395955
FireEyeGeneric.mg.31aae5315e22b4b0
SkyhighBehavesLike.Win32.Generic.bc
ALYacGen:Variant.Lazy.395955
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Taskun.Win32.10460
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005ab7a91 )
AlibabaTrojan:MSIL/Nanocore.4766a5d5
K7GWTrojan ( 005ab7a91 )
VirITTrojan.Win32.MSIL_Heur.A
SymantecTrojan.Gen.MBT
tehtrisGeneric.Malware
ESET-NOD32MSIL/Spy.AgentTesla.F
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Taskun.gen
BitDefenderGen:Variant.Lazy.395955
NANO-AntivirusTrojan.Win32.Taskun.kbibhq
AvastWin32:PWSX-gen [Trj]
TencentMalware.Win32.Gencirc.13f00441
EmsisoftGen:Variant.Lazy.395955 (B)
F-SecureTrojan.TR/AD.Nekark.vsejm
DrWebTrojan.PackedNET.2386
VIPREGen:Variant.Lazy.395955
TrendMicroTROJ_GEN.R002C0DIS23
Trapminemalicious.high.ml.score
SophosTroj/MSIL-SSP
IkarusTrojan.MSIL.Inject
VaristW32/MSIL_Kryptik.FSG.gen!Eldorado
AviraTR/AD.Nekark.vsejm
Antiy-AVLTrojan/MSIL.GenKryptik
KingsoftMSIL.Trojan.Taskun.gen
MicrosoftTrojan:MSIL/Formbook.AMBA!MTB
XcitiumMalware@#1sxy3asd2aqfh
ArcabitTrojan.Lazy.D60AB3
ViRobotTrojan.Win.Z.Taskun.735232
ZoneAlarmHEUR:Trojan.MSIL.Taskun.gen
GDataGen:Variant.Lazy.395955
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C5493022
McAfeeArtemis!31AAE5315E22
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0DIS23
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:PSTI8rbsB/P/HcYDnwQr7A)
YandexTrojan.Igent.b0S9H6.4
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.74644571.susgen
FortinetMSIL/Remcos.GWMJE!tr
BitDefenderThetaGen:NN.ZemsilF.36804.Sm0@a0kihxp
ZonerTrojan.Win32.162384
DeepInstinctMALICIOUS
alibabacloudTrojan:MSIL/GenKryptik.GNGS

How to remove Trojan:MSIL/Formbook.AMBA!MTB?

Trojan:MSIL/Formbook.AMBA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment