What is “MSIL/Injector.DTG”?

The MSIL/Injector.DTG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Injector.DTG virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Injector.DTG?


File Info:
crc32: 73D0158B
md5: 278ef0f0b344ac81691e45361114e81a
name: 278EF0F0B344AC81691E45361114E81A.mlw
sha1: 143cbbeac9fa945164a15a8a6c7353d6c9ccbbe6
sha256: dd2bf02f8719f9b7c23d78a153a6e394648a4dec881914e71397e63126b492ba
sha512: 07e33dc21a9d66b1342a1d58382312d7544017c2d369edcd267fe0733dda4facdd5d95c65d50a75ca643c5794c8587f1517c3e09d140cfa19999f78ebd7aa0f3
ssdeep: 12288:yvR80YrVqBA5M9LMTEPVYCaHNYHv6/NXDhgqkN/xGJU8l8x//VCDPTeZfkwT/nc:/0u2JytqylXUd8ad0DmI6TSfaU5Got
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2004
Assembly Version: 3.4.5.24
InternalName: nvsrv.exe
FileVersion: 4.5.6.27
CompanyName: actrEUPQcvl
LegalTrademarks: aoSCkOeIj6M7P
ProductName: aZ9WM9RZH6So
ProductVersion: 4.5.6.27
FileDescription: agX7IIYSmv5
OriginalFilename: nvsrv.exe

MSIL/Injector.DTG also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.5316210
FireEye	Generic.mg.278ef0f0b344ac81
McAfee	Artemis!278EF0F0B344
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Trojan.GenericKD.5316210
K7GW	Trojan ( 700000121 )
Cybereason	malicious.0b344a
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	MSIL:GenMalicious-E [Trj]
ClamAV	Win.Dropper.Razy-6965180-0
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.GenericKD.epzikg
Ad-Aware	Trojan.GenericKD.5316210
Emsisoft	Trojan.GenericKD.5316210 (B)
F-Secure	Trojan.TR/Dropper.MSIL.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.dm
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Injector
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Dropper.MSIL.Gen
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Backdoor:MSIL/Bladabindi
Arcabit	Trojan.Generic.D511E72
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Trojan.GenericKD.5316210
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZemsilF.34804.!m0@aqX4Mbg
ALYac	Trojan.GenericKD.5316210
MAX	malware (ai score=89)
Malwarebytes	Trojan.PCrypt.MSIL.Generic
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/Injector.DTG
Tencent	Msil.Trojan.Dropper.Hrpm
Yandex	Trojan.Injector!/KLH2Foe/PQ
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Injector.DTG!tr
AVG	MSIL:GenMalicious-E [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.535

How to remove MSIL/Injector.DTG?

MSIL/Injector.DTG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X