HackTool:MSIL/Injector.A removal tips

The HackTool:MSIL/Injector.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:MSIL/Injector.A virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine HackTool:MSIL/Injector.A?


File Info:
name: E45E311E29103A33AA41.mlw
path: /opt/CAPEv2/storage/binaries/89ae16d98378b0c7972cf84f37efc314adcc932eead3dd8c1c2cf9c97bd343c4
crc32: A402EF5E
md5: e45e311e29103a33aa41e817074f12cd
sha1: 90b1594d873c3c973c16a3217a5bae9a80763721
sha256: 89ae16d98378b0c7972cf84f37efc314adcc932eead3dd8c1c2cf9c97bd343c4
sha512: 3ac241ffbb6699c6ec67100b08ec5ecfd17f1c95cd000b09c6ebda2f027517781ad99147327d4797e9b0a952f50a05702ca910253963276da40b5926bc740c82
ssdeep: 12288:YKcd8fWzsUIz7GpvhjbA3Ny/aYrnj9jEsX2utrxAG7ENYLU+fIEd:YKcCfWzqz7Gp5MdQBtrxzY4fIS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T130D48B70EAE30FF5DF63C5B24AF697F56636F832EC1A970CB48C6B8144231498952D26
sha3_384: 6b4769c82dc81b16d4fb1f0d2d9a856189b853ab9286297fb080cc824f544df6be412939fadbe6c7a36927626a744ad6
ep_bytes: 6a00e8970b0000a310314000e8870b00
timestamp: 2014-05-20 11:54:40

Version Info:
0: [No Data]

HackTool:MSIL/Injector.A also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zbot.mpXz
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.Dropper.WOF
FireEye	Trojan.Dropper.WOF
McAfee	Trojan-FBXP!E45E311E2910
Cylance	unsafe
Zillya	Trojan.Zbot.Win32.155580
Sangfor	Ransom.Win32.Cerber_98.se
K7AntiVirus	Trojan-Downloader ( 0040f8431 )
Alibaba	HackTool:MSIL/Injector.e831927d
K7GW	Trojan-Downloader ( 0040f8431 )
Cybereason	malicious.e29103
BitDefenderTheta	Gen:NN.ZemsilF.36350.km0@aaPSbBe
VirIT	Trojan.Win32.Zbot.JBB
Cyren	W32/Trojan.SCWI-9207
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Trojan.Antifw-173
BitDefender	Trojan.Dropper.WOF
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Avast	MSIL:Inject-AW [Trj]
Tencent	Trojan-Spy.Win32.Zbot.haw
Emsisoft	Trojan.Dropper.WOF (B)
Baidu	Win32.Trojan-Downloader.Waski.a
DrWeb	Trojan.DownLoad3.33216
VIPRE	Trojan.Dropper.WOF
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
Sophos	Troj/DwnLdr-LOX
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.1NYCZ0Y
Jiangmin	TrojanSpy.Zbot.edxt
Google	Detected
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Waski.a
Xcitium	TrojWare.Win32.TrojanDownloader.Waski.E@5ag7i4
Arcabit	Trojan.Dropper.WOF
Microsoft	HackTool:MSIL/Injector.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Zbot.R107311
ALYac	Trojan.Dropper.WOF
TACHYON	Trojan-Spy/W32.ZBot.Zen.B
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Rising	Downloader.Waski!1.A489 (CLASSIC)
Ikarus	Trojan-Spy.Agent
MaxSecure	Trojan.Upatre.Gen
Fortinet	W32/Agent.BAVS!tr
AVG	MSIL:Inject-AW [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove HackTool:MSIL/Injector.A?

HackTool:MSIL/Injector.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X