MSIL/Injector.WKJ removal

The MSIL/Injector.WKJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Injector.WKJ virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/Injector.WKJ?


File Info:
name: 3EA2CC0BD210AA7EBCA6.mlw
path: /opt/CAPEv2/storage/binaries/a535e2947b8c7d26cac9e9d137f4af5d12428661d7ed7f3b51850fe9655b8a50
crc32: E6A36FE9
md5: 3ea2cc0bd210aa7ebca69a3588dae1e7
sha1: 618c305be78e09f736333daea5aaeb2c50d19897
sha256: a535e2947b8c7d26cac9e9d137f4af5d12428661d7ed7f3b51850fe9655b8a50
sha512: 33647f650d38288ed3c7079a4912c65747a678e2211ddcbc4de822d0b9f5e9bad18f26550f16ef4ba82b52f7ae0668dcc8871d7306f0cac70d3159446524fc4f
ssdeep: 96:I1oF0HPsY7YpMRA1h26+RrtfVLifYfsg8z09y1YAXpV0SepwbRymvzNt:fKA1h26ApUAf/a09y1/pV0SlB5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T129F1B719EBE48236E9664B325C6323501B79AB85CC63FA6E69C9200B5F6330547A3F71
sha3_384: 2331aeb045abb20d4592852f71307cdac8e578b29798a8f9e1762d313864d724423ab49d11412a798e664fd56503395b
ep_bytes: ff250020400000000000000000000000
timestamp: 2054-03-31 12:54:47

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: tupian
FileVersion: 1.0.0.0
InternalName: tupian.exe
LegalCopyright: Copyright ©  2024
LegalTrademarks: 
OriginalFilename: tupian.exe
ProductName: tupian
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Injector.WKJ also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Cerbu.4!c
MicroWorld-eScan	Trojan.GenericKD.72084091
FireEye	Generic.mg.3ea2cc0bd210aa7e
CAT-QuickHeal	Trojan.Agent
Skyhigh	Artemis!Trojan
ALYac	Trojan.GenericKD.72084091
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005b354f1 )
Alibaba	Trojan:MSIL/Injector.0405134a
K7GW	Trojan ( 005b354f1 )
BitDefenderTheta	Gen:NN.ZemsilF.36802.am0@aOKIrZh
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/Injector.WKJ
APEX	Malicious
BitDefender	Trojan.GenericKD.72084091
Avast	Win32:RATX-gen [Trj]
Sophos	Generic Reputation PUA (PUA)
Google	Detected
F-Secure	Trojan.TR/Injector.biodv
VIPRE	Gen:Variant.Cerbu.204367
Emsisoft	Trojan.GenericKD.72084091 (B)
Ikarus	Trojan.MSIL.Injector
GData	Trojan.GenericKD.72084091
Avira	TR/Injector.biodv
Antiy-AVL	GrayWare/Win32.Wacapew
Arcabit	Trojan.Generic.D44BEA7B
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	Trojan/Win.Generic.C5604253
McAfee	Artemis!3EA2CC0BD210
MAX	malware (ai score=85)
VBA32	Downloader.MSIL.gen.rexp
Malwarebytes	Trojan.Downloader.MSIL.Generic
Panda	Trj/Chgt.AD
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.237610764.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:RATX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove MSIL/Injector.WKJ?

MSIL/Injector.WKJ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X