Malware

MSIL.Nanocore.1 (file analysis)

Malware Removal

The MSIL.Nanocore.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL.Nanocore.1 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine MSIL.Nanocore.1?


File Info:

crc32: 7F23B195
md5: 95f80e82793aa540a748e43ce6a30fba
name: sssssss.exe
sha1: 0e771592dfce0de18184a9e9cf2e9fec914783c8
sha256: 115988fc87b224117e8b55663af1770037d59602f0014ca7a317b48b032c143b
sha512: 382001e4acb291fbf50278884656819a0f12eb6aa1a88c18848c157c50f87e702dcf1c06a72945129ef6a59d827e09aa6062e14698a8dd43b45d3c9e74ef17ab
ssdeep: 3072:lMli2AdjgaVH5hEm59C2SLWZdvn/NCsu1zbSjRLkzhzRWEV9UWlv38SA:lH2AialXf9X5YbOoFAyUWlv3PA
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

MSIL.Nanocore.1 also known as:

MicroWorld-eScanGen:Variant.MSIL.Nanocore.1
McAfeeGenericRXFP-DG!95F80E82793A
MalwarebytesBackdoor.NanoCore
K7AntiVirusTrojan ( 700000121 )
BitDefenderGen:Variant.MSIL.Nanocore.1
K7GWTrojan ( 700000121 )
Cybereasonmalicious.2793aa
TrendMicroBKDR_NANOCORE.SMD
F-ProtW32/NanoCore.C.gen!Eldorado
SymantecTrojan.Nancrat!g1
APEXMalicious
ClamAVWin.Trojan.Nanocore-5
GDataMSIL.Backdoor.Nancat.I
KasperskyHEUR:Trojan.MSIL.Agent.gen
NANO-AntivirusTrojan.Win32.Dwn.edxxmu
RisingBackdoor.Noancooe!8.176 (TFE:dGZlOgyR1V0mJw3MEQ)
Ad-AwareGen:Variant.MSIL.Nanocore.1
EmsisoftGen:Variant.MSIL.Nanocore.1 (B)
F-SecureHeuristic.HEUR/AGEN.1108376
DrWebTrojan.DownLoader13.36438
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.PUPXBZ.dc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.95f80e82793aa540
SophosMal/NanoCore-A
IkarusBackdoor.Rat.Nanocore
CyrenW32/NanoCore.C.gen!Eldorado
JiangminTrojan/Agent.ikbn
MaxSecureTrojan.Malware.300983.susgen
AviraHEUR/AGEN.1108376
MAXmalware (ai score=86)
Antiy-AVLTrojan/MSIL.Agent
Endgamemalicious (high confidence)
ArcabitTrojan.MSIL.Nanocore.1
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftBackdoor:MSIL/Nanocore.S!MTB
AhnLab-V3Trojan/Win32.Dynamer.C884764
Acronissuspicious
BitDefenderThetaGen:NN.ZemsilF.34106.mmW@aSKqp6l
ALYacGen:Variant.MSIL.Nanocore.1
VBA32TScope.Trojan.MSIL
CylanceUnsafe
ESET-NOD32a variant of MSIL/NanoCore.K
TrendMicro-HouseCallBKDR_NANOCORE.SMD
SentinelOneDFI – Malicious PE
eGambitTrojan.Generic
FortinetMSIL/NanoCore.K!tr
AVGWin32:CoinminerX-gen [Trj]
AvastWin32:CoinminerX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM03.0.9E5F.Malware.Gen

How to remove MSIL.Nanocore.1?

MSIL.Nanocore.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment