Malware

MSIL/Injector.VQI removal guide

Malware Removal

The MSIL/Injector.VQI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Injector.VQI virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/Injector.VQI?


File Info:

crc32: D4FC1C19
md5: 116ea5563c66463a934087a368871189
name: 116EA5563C66463A934087A368871189.mlw
sha1: b18b572216f8a3f38dbaa96bca19937729184c8d
sha256: f5d9d90cb7c604b627298b3c47620fef2b44216b9964aeb7c5d72e8d9b4b46ce
sha512: e2804050d6f2ae0096981154f4bd55132357f3838bd6232b14a91ce5bf12db31b40456a6b66177d2a71ae9f9b1f5b403eafcc0087bc3643bfa89ce141261d961
ssdeep: 768:WRMAuzCGP4U11qatTMU5AyidpXIF9Tea+MVGQduvQ5tYAdMFW:WVghx1IatTKddpifVG4x5tL0
type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2021
Assembly Version: 1.0.0.0
InternalName: Anasayfa.dll
FileVersion: 1.0.0.0
ProductName: Anasayfa
ProductVersion: 1.0.0.0
FileDescription: Anasayfa
OriginalFilename: Anasayfa.dll

MSIL/Injector.VQI also known as:

Elasticmalicious (high confidence)
ALYacTrojan.GenericKD.46735320
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderTrojan.GenericKD.46735320
K7GWTrojan ( 005806ed1 )
K7AntiVirusTrojan ( 005806ed1 )
ESET-NOD32a variant of MSIL/Injector.VQI
AlibabaTrojan:MSIL/Injector.2eefe4fd
MicroWorld-eScanTrojan.GenericKD.46735320
Ad-AwareTrojan.GenericKD.46735320
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.kh
FireEyeGeneric.mg.116ea5563c66463a
EmsisoftTrojan.GenericKD.46735320 (B)
Antiy-AVLTrojan/Generic.ASMalwS.1043F19
MicrosoftTrojan:Win32/Wacatac.B!ml
GridinsoftTrojan.Heur!.03012280
GDataTrojan.GenericKD.46735320
McAfeeArtemis!116EA5563C66
MAXmalware (ai score=82)
IkarusTrojan.MSIL.Injector
FortinetMSIL/VQI!tr

How to remove MSIL/Injector.VQI?

MSIL/Injector.VQI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment