MSIL/Injector.CCT information

The MSIL/Injector.CCT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Injector.CCT virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Behavioural detection: Injection (Process Hollowing)
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• CAPE detected the CyberGate malware family
• Checks for the presence of known devices from debuggers and forensic tools
• Checks for the presence of known devices from debuggers and forensic tools
• CAPE detected injection into a browser process, likely for Man-In-Browser (MITB) infostealing
• Accessed credential storage registry keys
• Attempts to masquerade or mimic a legitimate process or file name
• Creates known SpyNet mutexes and/or registry changes.
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine MSIL/Injector.CCT?

File Info:
name: 63A0509C0C7E8DCB75F5.mlw
path: /opt/CAPEv2/storage/binaries/7d93976408dc11ba72f22a1d3e8f56cb04bd709b2f59035e045cd95082294b52
crc32: DC8FCE19
md5: 63a0509c0c7e8dcb75f57331cfa6bd38
sha1: 16db2eaad442f6b3a011d270c5d3137c559d710c
sha256: 7d93976408dc11ba72f22a1d3e8f56cb04bd709b2f59035e045cd95082294b52
sha512: b2dd26729e01dd1bcb092ea70bcaef56d00a80360cea624fb93fc82de7ced772f616b59383c0eed9a975109cad5aa42c0e053342c4b6de552a64f1d82647f8f9
ssdeep: 12288:4ArOsSxQyf7cS3dllghQnqbaE23v7eNxQgbSc2yw/Nogi5QRjtOf2ABpj92KPalV:4f1+QAm7E2lImAaZz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FA0549343DEA501AB173EFA98BE475EADA6FB7733B07645D1090038A4723981DEC153A
sha3_384: f740e3cab9c6dad96c5029e5f4339a9a14b8c2271a5bbf3e7456873a527dab11089dbebe40ce78b581ab60aa0316add5
ep_bytes: ff250020400000000000000000000000
timestamp: 2011-05-12 11:26:58

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: server.exe
LegalCopyright:  
OriginalFilename: server.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSIL/Injector.CCT also known as:

How to remove MSIL/Injector.CCT?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.