Trojan

Trojan:MSIL/Lokibot.KA!MTB removal guide

Malware Removal

The Trojan:MSIL/Lokibot.KA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/Lokibot.KA!MTB virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:MSIL/Lokibot.KA!MTB?



File Info:

name: AF821C3A4658F13B7F73.mlw
path: /opt/CAPEv2/storage/binaries/2b7b0acfcb5a6b3fd04bff2b5b76ec0923f5f6b2e3a5dec61f1b2fe6e88c4f39
crc32: 03BA6F7B
md5: af821c3a4658f13b7f73891eff3efeb0
sha1: aa5afde55e688441d1ecc7308a85499eb094d5ae
sha256: 2b7b0acfcb5a6b3fd04bff2b5b76ec0923f5f6b2e3a5dec61f1b2fe6e88c4f39
sha512: cae0c5c07e2eed7bf40aad2127cc7f74d5c3e6712c697787717ca6449e8bf153440ba8b079321364831769a7d906fd4c0acfe49aadfed45ebec537c284c72f5e
ssdeep: 6144:eYE7uq6BFmQkHhVvVXwlNjuLbXUCMBGkZTxlUkgenFk5s:exixBFmTPAriXUtG5kgKk6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C054129437655712C6AF07B924A2418507B2E60BE545FB9E2ECA30DF1B52F224F30ADF
sha3_384: b2ca7cca3b64c8a6c6ba8065fe85b74c9d5f9e9dfc7e696855dc70bf5a5edc340999c8b22a7e7ab4cebc7d4704537a1f
ep_bytes: ff250020400036000000ad0e00000800
timestamp: 2021-11-28 22:16:41


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: SpaceGame
FileVersion: 1.0.0.0
InternalName: ReturnValueNameAttribu.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: ReturnValueNameAttribu.exe
ProductName: SpaceGame
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan:MSIL/Lokibot.KA!MTB also known as:

LionicTrojan.MSIL.Agensla.i!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.80865
FireEyeGeneric.mg.af821c3a4658f13b
McAfeeRDN/Generic
CylanceUnsafe
ZillyaTrojan.GenKryptik.Win32.112374
K7AntiVirusTrojan ( 0058afe51 )
AlibabaTrojan:Win32/csharp.ali2000008
K7GWTrojan ( 0058b02e1 )
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderThetaGen:NN.ZemsilF.34084.sm0@a4L0Vhp
CyrenW32/MSIL_Kryptik.GEO.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of MSIL/Kryptik.ADPR
TrendMicro-HouseCallTROJ_GEN.R002C0WKT21
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefenderTrojan.GenericKDZ.80865
NANO-AntivirusTrojan.Win32.Agensla.jinxhs
AvastWin32:PWSX-gen [Trj]
TencentMsil.Trojan-qqpass.Qqrob.Lqes
Ad-AwareTrojan.GenericKDZ.80865
EmsisoftTrojan.GenericKDZ.80865 (B)
ComodoTrojWare.Win32.UMal.ktogu@0
DrWebTrojan.Siggen15.57421
TrendMicroTROJ_GEN.R002C0WKT21
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
SophosMal/Generic-R + Troj/Krypt-FF
IkarusTrojan.MSIL.Inject
JiangminTrojan.PSW.MSIL.cxru
WebrootW32.Trojan.Gen
AviraTR/Dropper.MSIL.dkbdq
MAXmalware (ai score=100)
Antiy-AVLTrojan/Generic.ASMalwS.34DB227
KingsoftWin32.PSWTroj.Undef.(kcloud)
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:MSIL/Lokibot.KA!MTB
APEXMalicious
GDataTrojan.GenericKDZ.80865
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Sabsik.C4790524
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.FormBook
YandexTrojan.GenKryptik!3kTim/um1tc
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Kryptik.ADNV!tr
AVGWin32:PWSX-gen [Trj]
PandaTrj/GdSda.A
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan:MSIL/Lokibot.KA!MTB?

Trojan:MSIL/Lokibot.KA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment