Trojan:MSIL/Remcos.EO!MTB removal instruction

The Trojan:MSIL/Remcos.EO!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/Remcos.EO!MTB virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:MSIL/Remcos.EO!MTB?


File Info:
crc32: 27E74441
md5: 7c56b212efbee6f8395051ee896d9d50
name: 7C56B212EFBEE6F8395051EE896D9D50.mlw
sha1: 3ab8efe3a467b01885a564a5ba60bc52142ee935
sha256: b2007a0e1e70eec1de0bc169055b1a3d87b96a24d47fb1e3332b9a56606e43f0
sha512: faaaefca053641dfdee257abecd290bdc3fbac181cbb3ed503f19125fac10444e658b6f934e339a3a8b8f31c42bd7d7e3cee4813abad1d13b9f836c56c6d8083
ssdeep: 3072:OUQrTIF0nMpi6B32GhNvT0ybmIhYzZFsVlF7XEgC:Hx2GhNjkzZFsVlF7XE
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: WindowsFormsApplication1.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: WindowsFormsApplication1
ProductVersion: 1.0.0.0
FileDescription: WindowsFormsApplication1
OriginalFilename: WindowsFormsApplication1.exe

Trojan:MSIL/Remcos.EO!MTB also known as:

K7AntiVirus	Trojan ( 005723e91 )
Lionic	Trojan.MSIL.Bladabindi.m!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.37037564
Cylance	Unsafe
Zillya	Trojan.GenKryptik.Win32.91997
Sangfor	Backdoor.MSIL.Bladabindi.gen
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:MSIL/Remcos.9d744c1e
K7GW	Trojan ( 005723e91 )
Cyren	W32/MSIL_Kryptik.EMA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GenKryptik.ETQB
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
BitDefender	Trojan.GenericKD.37037564
NANO-Antivirus	Trojan.Win32.Bladabindi.iwikut
MicroWorld-eScan	Trojan.GenericKD.37037564
Tencent	Msil.Backdoor.Bladabindi.Ajby
Ad-Aware	Trojan.GenericKD.37037564
Sophos	Mal/Generic-S
Comodo	Malware@#15pea86kqj0j2
BitDefenderTheta	Gen:NN.ZemsilF.34236.km0@aeqsBim
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WFA21
McAfee-GW-Edition	GenericRXOU-WG!7C56B212EFBE
FireEye	Generic.mg.7c56b212efbee6f8
Emsisoft	Trojan.GenericKD.37037564 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.MSIL.ercq
Avira	HEUR/AGEN.1140191
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.3357588
Microsoft	Trojan:MSIL/Remcos.EO!MTB
Arcabit	Trojan.Generic.D23525FC
GData	Trojan.GenericKD.37037564
AhnLab-V3	Malware/Win.Generic.C4513172
McAfee	GenericRXOU-WG!7C56B212EFBE
MAX	malware (ai score=87)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Backdoor.Bladabindi
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WFA21
Yandex	Trojan.GenKryptik!kmfLr8hx/iA
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.73686729.susgen
Fortinet	MSIL/GenKryptik.ETMY!tr
AVG	Win32:RATX-gen [Trj]

How to remove Trojan:MSIL/Remcos.EO!MTB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:MSIL/Remcos.EO!MTB removal instruction