Should I remove “Trojan:MSIL/Tiny.AC!MTB”?

The Trojan:MSIL/Tiny.AC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Tiny.AC!MTB virus can do?

Sample contains Overlay data
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan:MSIL/Tiny.AC!MTB?


File Info:
name: 27A704C3C111FA371EC2.mlw
path: /opt/CAPEv2/storage/binaries/52bb1beb522064969f2febe7c864c4d44fc021d6fe869f6cda7d4f213a91c2ba
crc32: 724D6034
md5: 27a704c3c111fa371ec205bbbd6290eb
sha1: d56b9b8ef63b6a39c6b906d2d7251eba688fc9bb
sha256: 52bb1beb522064969f2febe7c864c4d44fc021d6fe869f6cda7d4f213a91c2ba
sha512: 8818cc0e3e8909ce9b4eb31ef7ac30e6aa6d3d874ad3122cef21c29405170a9ed131c320f2fe33f4b00095f4fab17316b6c1e896a52ff18ae6c7a5195814d74c
ssdeep: 1536:hVd5MRfMaURNIdL1MY8v3a1N1deyMXvkadNwXIRMAyYa0HNrqX92J3VhrmLmtugl:f
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18ED3106E3AC0E716E8665A338DB5C1E5E6313C017E19BACB71C1770FACB1605AF42E49
sha3_384: 3f33db804c477e870ba7b07203387213393c3d4598b1e13617ac010eae93639eac593a4933139507bb11372cd838720d
ep_bytes: ff250020400000000000000000000000
timestamp: 1970-01-01 00:00:00

Version Info:
Translation: 0x007f 0x04b0
Comments:  
CompanyName:  
FileDescription:  
FileVersion: 0.0.0.0
InternalName: ransomware.exe
LegalCopyright:  
LegalTrademarks:  
OriginalFilename: ransomware.exe.exe
ProductName:  
ProductVersion:

Trojan:MSIL/Tiny.AC!MTB also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
McAfee	GenericRXGD-PT!27A704C3C111
Cybereason	malicious.3c111f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Tiny.F
APEX	Malicious
ClamAV	Win.Malware.Razy-6915301-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.Ransom.MSIL.!diop!.1
MicroWorld-eScan	Gen:Heur.Ransom.MSIL.!diop!.1
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Gen:Heur.Ransom.MSIL.!diop!.1
Sophos	ML/PE-A + Troj/Tiny-DI
DrWeb	Trojan.DownLoader24.58606
VIPRE	Gen:Heur.Ransom.MSIL.!diop!.1
McAfee-GW-Edition	GenericRXGD-PT!27A704C3C111
FireEye	Generic.mg.27a704c3c111fa37
Emsisoft	Gen:Heur.Ransom.MSIL.!diop!.1 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Heur.Ransom.MSIL.!diop!.1
Avira	HEUR/AGEN.1235011
MAX	malware (ai score=86)
Arcabit	Trojan.Ransom.MSIL.!diop!.1
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:MSIL/Tiny.AC!MTB
AhnLab-V3	Trojan/Win32.Dynamer.R199417
Acronis	suspicious
ALYac	Gen:Heur.Ransom.MSIL.!diop!.1
Malwarebytes	Generic.Trojan.Malicious.DDS
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:yW9pmUPxFPWGGC4GNx2xbg)
Ikarus	Trojan.MSIL.Tiny
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Tiny.F!tr
BitDefenderTheta	Gen:NN.ZemsilF.34806.im1@aOrPyig
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Trojan:MSIL/Tiny.AC!MTB?

Trojan:MSIL/Tiny.AC!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X