Malware

How to remove “MSIL/Injector.UXC”?

Malware Removal

The MSIL/Injector.UXC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Injector.UXC virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine MSIL/Injector.UXC?


File Info:

crc32: 908A6FD6
md5: 48e9df7a479e3fd63064ec66e2283a45
name: hive.exe
sha1: a8dcce44de655a97a3448758b397a37d1f7db549
sha256: c7d8c3c379dcc42fa796b07b6a9155826d39cbd2f264bc68d22a63b17c8ef7df
sha512: 6cc839f118cad9982ec998665b409dc297a8cff9b23ec2a9105d15cf58d9adbf46d0048dda76c8e1574f6288d901912b7de373920b68b53dbda43d6075611016
ssdeep: 24576:Btfzn83OZdOpSOKnnnBC12uacGIqsFWSTI0OJUAMekzSjS9mmCJad18lfWK4E6o:Pzn83wdkSJBW1GIqsF9TIfJrzkAS99H
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: Skybird communications
Assembly Version: 1.3.3.68
InternalName: ScanDir
FileVersion: 1.3.3.68
CompanyName: Skybird communications
LegalTrademarks: Skybird communications
Comments:
ProductName: ScanDir
ProductVersion: 1.3.3.68
FileDescription: ScanDir
OriginalFilename: ScanDir
Translation: 0x0000 0x04b0

MSIL/Injector.UXC also known as:

MicroWorld-eScanTrojan.GenericKD.43227948
ALYacTrojan.GenericKD.43227948
CylanceUnsafe
K7AntiVirusTrojan ( 0056734f1 )
AlibabaTrojan:Win32/runner.ali1000123
K7GWTrojan ( 0056734f1 )
Cybereasonmalicious.4de655
ArcabitTrojan.Generic.D2939B2C
TrendMicroTROJ_GEN.R01FC0WES20
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.MSIL.Inject.acffj
BitDefenderTrojan.GenericKD.43227948
Paloaltogeneric.ml
TencentMsil.Trojan.Inject.Pgdl
Ad-AwareTrojan.GenericKD.43227948
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
MaxSecureTrojan.Malware.300983.susgen
FireEyeGeneric.mg.48e9df7a479e3fd6
EmsisoftTrojan.GenericKD.43227948 (B)
SentinelOneDFI – Malicious PE
WebrootW32.Hack.Tool
MAXmalware (ai score=87)
Antiy-AVLTrojan/MSIL.Inject
MicrosoftTrojan:Win32/Wacatac.C!ml
Endgamemalicious (high confidence)
AegisLabTrojan.MSIL.Inject.4!c
ZoneAlarmTrojan.MSIL.Inject.acffj
GDataTrojan.GenericKD.43227948
McAfeeArtemis!48E9DF7A479E
VBA32CIL.HeapOverride.Heur
MalwarebytesSpyware.KeyLogger
ESET-NOD32a variant of MSIL/Injector.UXC
TrendMicro-HouseCallTROJ_GEN.R01FC0WES20
IkarusTrojan.Hesv
FortinetMSIL/UXC!tr
BitDefenderThetaGen:NN.ZemsilF.34122.Ev0@a04J37li
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Generic/Trojan.3f3

How to remove MSIL/Injector.UXC?

MSIL/Injector.UXC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment