Categories: Malware

How to remove “MSIL.Injector.13”?

The MSIL.Injector.13 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL.Injector.13 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Uses Windows utilities for basic functionality
Sniffs keystrokes
Executed a process and injected code into it, probably while unpacking
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Exhibits behavior characteristic of iSpy Keylogger
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

cihan05.duckdns.org

How to determine MSIL.Injector.13?


File Info:
crc32: 217EDAE3md5: 85f43d910e360b38d7f4342186ba25c5name: 85F43D910E360B38D7F4342186BA25C5.mlwsha1: e76e0d97fb8c91254e370c0559cabac43c5ee254sha256: f9046f9d24bc112c530876ebb377e1cd2ddc0c9f656354de675bb11158af312csha512: aa7ae51a25de33a0049d5dc44d26bdd9df6e6438bb23a35e6707041b6b2d7571c5207fd9d09a5275e76c9f426f7eaa98abbafbe14376d746b413b78780199864ssdeep: 6144:WFF1KvukdKq1i3xK6BbtI7I2pFFQJDw0:WFFQuaL1ik6/Ltype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
0: [No Data]

MSIL.Injector.13 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSIL.Injector.13
FireEye	Generic.mg.85f43d910e360b38
ALYac	Gen:Variant.MSIL.Injector.13
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 00515f731 )
BitDefender	Gen:Variant.MSIL.Injector.13
K7GW	Trojan ( 00515f731 )
Cybereason	malicious.10e360
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Unsafe-6622966-0
Kaspersky	HEUR:Backdoor.MSIL.Generic
NANO-Antivirus	Trojan.Win32.Zusy.eslclc
AegisLab	Trojan.Win32.Generic.4!c
Ad-Aware	Gen:Variant.MSIL.Injector.13
Emsisoft	Gen:Variant.MSIL.Injector.13 (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.DownLoader11.18111
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	BKDR_ASFORTAL.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.hz
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Injector
Avira	TR/Dropper.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	Backdoor:MSIL/Bladabindi
Arcabit	Trojan.MSIL.Injector.13
ZoneAlarm	HEUR:Backdoor.MSIL.Generic
GData	Gen:Variant.MSIL.Injector.13
Cynet	Malicious (score: 100)
McAfee	GenericRXCP-EO!85F43D910E36
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
Zoner	Worm.Win32.Mytob.712
ESET-NOD32	a variant of MSIL/Injector.SVW
TrendMicro-HouseCall	BKDR_ASFORTAL.SM
Tencent	Malware.Win32.Gencirc.11496d6a
Yandex	Trojan.Agent!Y3ZRb74TXm4
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Injector.SQK!tr
BitDefenderTheta	Gen:NN.ZemsilF.34804.LmZ@aeLCM9c
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)