Malware

VirTool:MSIL/Aviator.A!MTB malicious file

Malware Removal

The VirTool:MSIL/Aviator.A!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:MSIL/Aviator.A!MTB virus can do?

  • Anomalous binary characteristics

How to determine VirTool:MSIL/Aviator.A!MTB?


File Info:

crc32: 4079A988
md5: f77bae39da73e9c0dc4409544a20433e
name: F77BAE39DA73E9C0DC4409544A20433E.mlw
sha1: 7ab5acf575ed0246210a38bc8f9f4b935a45a6c7
sha256: 54f2e88c15376510c95263b1fe4175476198c07eb908a03d1af6895db29070e0
sha512: 9b2d2d9b45851e589ba10aea0d0129845a529f408595ddc16aba2460d9c8f3217451af48861375b7e1e2d44a2257551447cd8087e2a465db0a2637ad8f54e978
ssdeep: 384:uS+dfCKEjkYRyntJ7Pz2kL2yk91CpdKv2ERQ7AKitMjho5HvS1Oy:uSMfCzj7RynIV91AdCTRQ7AKuCho5Hv
type: PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: 1.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: 1.exe

VirTool:MSIL/Aviator.A!MTB also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.159877
FireEyeGeneric.mg.f77bae39da73e9c0
McAfeeGenericRXKD-VL!F77BAE39DA73
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0054f1e81 )
BitDefenderGen:Variant.Bulz.159877
K7GWTrojan ( 0054f1e81 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW64/Ursu.EH.gen!Eldorado
SymantecTrojan.Gen.MBT
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Packed.Ursu-9784052-0
KasperskyHEUR:Trojan.MSIL.Bsymem.gen
AlibabaVirTool:MSIL/Aviator.905460d7
Ad-AwareGen:Variant.Bulz.159877
SophosATK/Kryptik-CU
ComodoMalware@#2ip7c0psa5r84
F-SecureHeuristic.HEUR/AGEN.1139568
DrWebTrojan.DownLoader32.57624
TrendMicroTROJ_GEN.R03BC0DLD20
McAfee-GW-EditionGenericRXKD-VL!F77BAE39DA73
EmsisoftGen:Variant.Bulz.159877 (B)
AviraHEUR/AGEN.1139568
MAXmalware (ai score=81)
MicrosoftVirTool:MSIL/Aviator.A!MTB
GridinsoftTrojan.Win64.Downloader.oa
ArcabitTrojan.Bulz.D27085
ZoneAlarmHEUR:Trojan.MSIL.Bsymem.gen
GDataGen:Variant.Bulz.159877
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win64.RL_MSIL.C3585778
ALYacGen:Variant.Bulz.159877
MalwarebytesMalware.AI.544801656
ESET-NOD32a variant of MSIL/Rozena.L
TrendMicro-HouseCallTROJ_GEN.R03BC0DLD20
TencentMsil.Trojan.Bsymem.Ednn
IkarusTrojan.MSIL.Rozena
FortinetMSIL/Rozena.L!tr
AVGWin64:TrojanX-gen [Trj]
Cybereasonmalicious.9da73e
AvastWin64:TrojanX-gen [Trj]
Qihoo-360Win64/Trojan.Bsymem.H8kABGwC

How to remove VirTool:MSIL/Aviator.A!MTB?

VirTool:MSIL/Aviator.A!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment