Trojan

Trojan:MSIL/Rzelt.A!MTB removal

Malware Removal

The Trojan:MSIL/Rzelt.A!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/Rzelt.A!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Trojan:MSIL/Rzelt.A!MTB?



File Info:

name: 6604D7101F1024931D42.mlw
path: /opt/CAPEv2/storage/binaries/d0a43434317f4e18b90fa1ab459b8339993b58bd0c35a337d125658c7292a8d4
crc32: B278364B
md5: 6604d7101f1024931d4200398ab820db
sha1: 0110f596dc33cea9a7bd99252cfee1364a2977d7
sha256: d0a43434317f4e18b90fa1ab459b8339993b58bd0c35a337d125658c7292a8d4
sha512: 01da5fc0d1c03aa4cea0a47fd9f86b0cf9ce44ca542f10d6adc80cd3f79e4941cfbd719370dfa44c387586029adcdfca8e50fe5e702064f73033ef7f2288798e
ssdeep: 96:JxNlv/rn2JKbqXRh9AuxipOeUXV579WbhRN6ylfwls+VF/vbN+EhkhWz9cczNt:D/rn2JKb+Rh34I9WbhRNNWlzyUZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12902C806A7F84629C5FA8B7C98B2430093B2F6975633CA1E1CC401BDAD66B58C9937E5
sha3_384: cbe02f1c84290a948de65a754bd07f86a163f24a3c4931a44992bbf7970c9db64c0dac2f73703ee730edfde59fddf865
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-06-13 23:00:32


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tiktok user.exe
LegalCopyright:  
OriginalFilename: tiktok user.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:MSIL/Rzelt.A!MTB also known as:

LionicTrojan.Win32.Agent.Y!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop21.36588
MicroWorld-eScanIL:Trojan.MSILZilla.6980
FireEyeGeneric.mg.6604d7101f102493
CAT-QuickHealTrojan.GenericFC.S30154231
McAfeeGenericRXVW-XW!6604D7101F10
Cylanceunsafe
ZillyaTrojan.Agent.Win32.3538497
SangforSpyware.Msil.Agent.Vdwt
K7AntiVirusSpyware ( 005a4a2e1 )
AlibabaTrojan:MSIL/SpywareX.efe32a7f
K7GWSpyware ( 005a4a2e1 )
Cybereasonmalicious.6dc33c
BitDefenderThetaGen:NN.ZemsilF.36318.am0@aqcKTop
CyrenW32/MSIL_Agent.FHD.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Agent.EMZ
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.MSIL.Agent.gen
BitDefenderIL:Trojan.MSILZilla.6980
AvastWin32:SpywareX-gen [Trj]
TencentMalware.Win32.Gencirc.13d1e6ed
TACHYONTrojan/W32.DN-Agent.8704.CE
EmsisoftIL:Trojan.MSILZilla.6980 (B)
F-SecureHeuristic.HEUR/AGEN.1308527
VIPREIL:Trojan.MSILZilla.6980
TrendMicroTROJ_GEN.R002C0DFE23
McAfee-GW-EditionBehavesLike.Win32.Generic.xt
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan.MSIL.Spy
AviraHEUR/AGEN.1308527
Antiy-AVLTrojan[Spy]/MSIL.Agent
MicrosoftTrojan:MSIL/Rzelt.A!MTB
ArcabitIL:Trojan.MSILZilla.D1B44
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
GDataMSIL.Trojan-Spy.Agent.BNB
GoogleDetected
AhnLab-V3Trojan/Win.RealProtect-LS.C5420968
VBA32TScope.Trojan.MSIL
ALYacIL:Trojan.MSILZilla.6980
MAXmalware (ai score=81)
MalwarebytesTrojan.RDPGrabber
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DFE23
RisingSpyware.Agent!8.C6 (CLOUD)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.8703358.susgen
FortinetMSIL/Agent_AGen.AZ!tr.spy
AVGWin32:SpywareX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:MSIL/Rzelt.A!MTB?

Trojan:MSIL/Rzelt.A!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment