Categories: Malware

MSIL/Injector.CXH removal

The MSIL/Injector.CXH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Injector.CXH virus can do?

Reads data out of its own binary image
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSIL/Injector.CXH?


File Info:
name: C8D2C977BDFF6165C318.mlwpath: /opt/CAPEv2/storage/binaries/fa4aaad036d49c866bf3987b82d0daf32aedba4a7fbef9e4ed45c445d7a93629crc32: 7FF97117md5: c8d2c977bdff6165c3181ab02058aeb2sha1: 0b94526c1c879bae8fc5314b8de6a8f975cfd10fsha256: fa4aaad036d49c866bf3987b82d0daf32aedba4a7fbef9e4ed45c445d7a93629sha512: 22324ad6e1e1eff842cfd09253e1137e2a1dd3751fdaffaf1ede3677b70b796f847b82c7890d44d7b64fdfcee58a1d69f8fa44a9396475083d2a91bac14be6b8ssdeep: 12288:FehAwno3rrLhiceSDZcmvm1hmsZXbcevxMVfrYiAnwWrxWAsM1J6fswlsPPr6Ezy:FCAwno3rRiceIpvmSsmev+ERWAsM1J6Ntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B3F4231BEBBA4126CA6E9ABE64F026325780BC171A16CBCF5ACD0F541D43FF585026C3sha3_384: a5d2027f931eef2da5e47f26bc67066f8f8e3d0c06499be8b3a07e8c6111e408e887262baba01e285d30df4d5b64dd3eep_bytes: ff250020400000000000000000000000timestamp: 2012-12-24 10:43:36
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: server2.exeLegalCopyright:  OriginalFilename: server2.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

MSIL/Injector.CXH also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Generic.m0AW
MicroWorld-eScan	Gen:Heur.MSIL.Bladabindi.1
ClamAV	Win.Trojan.Agent-507644
FireEye	Generic.mg.c8d2c977bdff6165
Cylance	Unsafe
VIPRE	Gen:Heur.MSIL.Bladabindi.1
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:MSIL/Injector.6385bfdb
Cybereason	malicious.7bdff6
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Injector.CXH
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.MSIL.Bladabindi.1
NANO-Antivirus	Trojan.Win32.CXH.cwrvqe
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Generic.Xfow
Ad-Aware	Gen:Heur.MSIL.Bladabindi.1
Emsisoft	Gen:Heur.MSIL.Bladabindi.1 (B)
Comodo	Application.MSIL.BrowseFox.A@5iv0tx
Zillya	Trojan.Genome.Win32.245045
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
Ikarus	Trojan.MSIL.Bladabindi
GData	Gen:Heur.MSIL.Bladabindi.1
Webroot	W32.Malware.Heur
Avira	TR/Dropper.MSIL.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.5E
Kingsoft	Win32.Troj.Generic.a.(kcloud)
Arcabit	Trojan.MSIL.Bladabindi.1
Microsoft	Backdoor:Win32/Bladabindi!ml
Google	Detected
AhnLab-V3	Trojan/Win32.Inject.C847295
BitDefenderTheta	Gen:NN.ZemsilF.34682.Vm0@aOKuZ4h
MAX	malware (ai score=99)
Malwarebytes	Backdoor.Bladabindi.Generic
Rising	Trojan.Generic/MSIL@AI.96 (RDM.MSIL:LDHf6J7wK8SnOkFm1Wkn3Q)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Generic.AP.CFB480A!tr
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)