Malware

How to remove “MSIL/Injector.VCP”?

Malware Removal

The MSIL/Injector.VCP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Injector.VCP virus can do?

  • Network activity detected but not expressed in API logs
  • Mimics icon used for popular non-executable file format

How to determine MSIL/Injector.VCP?



File Info:

crc32: 883851B3
md5: d598e76ae69bbda027e27df2a6f3bd2c
name: upload_file
sha1: b7614f956af5f407b4210702aefb80277b3efd66
sha256: 1534e0a215de911efa5073d29be5646b2742ad58b4cb29600449e574a6c5bb6a
sha512: 5b51f8cc5b9d833c6b35d240d07fa993e7402846c6f63aa07863f5bd4e6b1af07a622f984e366c6605cc5c11d9d3a9ba157d81fa84377deb214f4ab76272e008
ssdeep: 6144:yTCW9n0vRYj6pvE7eaR+bsBaVw49NFLMIrsQpg/A5XsFSgujpGkajr95:LWqYGpvE7eQER9N5P5v5XsY7jIr
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2009 - 2020
Assembly Version: 0.0.0.0
InternalName: gfghg4.exe
FileVersion: 5.8.10.13
CompanyName: xac22-2xac10*xac02xac1c5xac150xac0c}9xac15/xac2f>7xac16xac0b3xac03{xac0fxac28?xac0c6xac18xac251^:xac03
Comments: xac1e[6xac0axac2dxac16<8!3xac12xac22xac1f?xac090
ProductName: 4xac0b;xac24xac07xac095[9xac2a~xac27xac0fxac256_/2xac2dxac11
ProductVersion: 5.8.10.13
FileDescription: 4xac0b;xac24xac07xac095[9xac2a~xac27xac0fxac256_/2xac2dxac11
OriginalFilename: gfghg4.exe

MSIL/Injector.VCP also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.43776068
McAfeeFareit-FVT!D598E76AE69B
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 0056db4a1 )
BitDefenderTrojan.GenericKD.43776068
K7GWTrojan ( 0056db4a1 )
CrowdStrikewin/malicious_confidence_100% (W)
TrendMicroTROJ_GEN.R002C0DI520
BitDefenderThetaGen:NN.ZemsilF.34216.Jm0@aOCvXFi
CyrenW32/Faker.F.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Hesv.gen
AlibabaTrojanSpy:MSIL/AgentTesla.b9f1d997
ViRobotTrojan.Win32.Z.Woreflint.576512
Ad-AwareTrojan.GenericKD.43776068
F-SecureTrojan.TR/AD.AgentTesla.rbxab
InvinceaMal/Generic-S
FireEyeGeneric.mg.d598e76ae69bbda0
SophosMal/Generic-S
IkarusTrojan-Spy.Keylogger.AgentTesla
AviraTR/AD.AgentTesla.rbxab
MAXmalware (ai score=88)
Antiy-AVLTrojan/MSIL.Hesv
MicrosoftTrojanSpy:MSIL/AgentTesla.AQ!MTB
ArcabitTrojan.Generic.D29BF844
AhnLab-V3Trojan/Win32.Injector.C4127945
ZoneAlarmHEUR:Trojan.MSIL.Hesv.gen
GDataTrojan.GenericKD.43776068
CynetMalicious (score: 85)
ESET-NOD32a variant of MSIL/Injector.VCP
ALYacTrojan.GenericKD.43776068
MalwarebytesTrojan.Crypt.MSIL.Generic
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DI520
TencentMsil.Trojan.Hesv.Wrqe
FortinetW32/Hesv!tr
AVGWin32:PWSX-gen [Trj]
Cybereasonmalicious.56af5f
AvastWin32:PWSX-gen [Trj]
Qihoo-360Generic/Trojan.496

How to remove MSIL/Injector.VCP?

MSIL/Injector.VCP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment