MSIL/Injector.QFY removal instruction

The MSIL/Injector.QFY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Injector.QFY virus can do?

Creates RWX memory

How to determine MSIL/Injector.QFY?


File Info:
crc32: 5D551307
md5: 572f877e3d3f7bcb08d6c9fc4179be86
name: 572F877E3D3F7BCB08D6C9FC4179BE86.mlw
sha1: be48b8cf18e4dee926db8a46036c94739ca19630
sha256: 00441ad7d5256649f87924ecd495fedb9fd176570d7ab291054a1c46a180f215
sha512: 7aa6afb5a692a50e4779783c54969c014d1520e0abd06b5eb37357f120d7614e6bd87b6410ba4854dd7af8dbeb34f1e4278a0e1d3df6a8d99fe67b4a799fdd22
ssdeep: 1536:BOfGYduL6maHLp5ecwJ4ZbkC4tsxFAxkcvEzVfByeIPZDB7UkdbbZJZm:BOuYdwaHLp51bkRt2KKcv2JaDtRDJZm
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: Sserver.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: Sserver.exe

MSIL/Injector.QFY also known as:

K7AntiVirus	Trojan ( 004df9061 )
Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner2.47338
Cynet	Malicious (score: 100)
Cylance	Unsafe
Zillya	Backdoor.Agent.Win32.68636
Alibaba	Backdoor:MSIL/Kryptik.fcda1bc1
K7GW	Trojan ( 004df9061 )
Cybereason	malicious.f18e4d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Injector.QFY
APEX	Malicious
Avast	MSIL:GenMalicious-GA [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Agent.gen
NANO-Antivirus	Trojan.Win32.Autoruner2.fhxsht
Tencent	Msil.Backdoor.Agent.Sueh
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.hm0@aiuBz2e
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.572f877e3d3f7bcb
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.MSIL.Gen
Microsoft	Backdoor:MSIL/Bladabindi
McAfee	Generic.dyr
MAX	malware (ai score=100)
Malwarebytes	Trojan.Downloader
Panda	Trj/GdSda.A
Ikarus	Backdoor.MSIL
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.FJP!tr
AVG	MSIL:GenMalicious-GA [Trj]
Paloalto	generic.ml

How to remove MSIL/Injector.QFY?

MSIL/Injector.QFY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X