Risk

MSIL/Riskware.Cymulate.A removal tips

Malware Removal

The MSIL/Riskware.Cymulate.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Riskware.Cymulate.A virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/Riskware.Cymulate.A?


File Info:

crc32: 40AEDA11
md5: 7bb85b0927842ebf29756afa6d49d887
name: 7BB85B0927842EBF29756AFA6D49D887.mlw
sha1: 3635803b4db216d7c3dacb753056f15cdee38f31
sha256: 4c7341cfeddaa89dadb9cf9a471590f15aea3d1e7e7d6af4b6b804ed1942463c
sha512: 66f9f529c2b4dafe368289106e9a8056a47afc98a9ff055fb8636e4ff6d17b9949675f34d9c3e4b00a1419d1cba41b0657df4b1e7504234026f2f3b2501a56af
ssdeep: 1536:n+DXVLGynzhOD3vpS1YcqLB4eQrVPb7aIZabc/cHIIpv:+LVLGI6vpS1YFB4eQtJU02IIpv
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2018
Assembly Version: 1.0.0.0
InternalName: CymulateOutlookCOMOBJWorm.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: CymulateCOMOBJWorm
ProductVersion: 1.0.0.0
FileDescription: CymulateCOMOBJWorm
OriginalFilename: CymulateOutlookCOMOBJWorm.exe

MSIL/Riskware.Cymulate.A also known as:

K7AntiVirusRiskware ( 005672271 )
LionicRiskware.MSIL.Cymulate.1!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealPUA.CymulateFC.S23226107
ALYacIL:Trojan.MSILZilla.5667
CylanceUnsafe
SangforRiskware.MSIL.Cymulate.gen
K7GWRiskware ( 005672271 )
Cybereasonmalicious.927842
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Riskware.Cymulate.A
APEXMalicious
AvastWin32:Malware-gen
Kasperskynot-a-virus:HEUR:RiskTool.MSIL.Cymulate.gen
BitDefenderIL:Trojan.MSILZilla.5667
MicroWorld-eScanIL:Trojan.MSILZilla.5667
TencentMsil.Risk.Cymulate.Akzg
Ad-AwareIL:Trojan.MSILZilla.5667
SophosGeneric PUA DG (PUA)
BitDefenderThetaGen:NN.ZemsilF.34266.dm0@aiW79Gp
TrendMicroTROJ_GEN.R03BC0PK221
McAfee-GW-EditionGenericRXQE-GM!7BB85B092784
FireEyeGeneric.mg.7bb85b0927842ebf
EmsisoftIL:Trojan.MSILZilla.5667 (B)
JiangminRiskTool.MSIL.cpge
AviraHEUR/AGEN.1136824
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmnot-a-virus:HEUR:RiskTool.MSIL.Cymulate.gen
GDataIL:Trojan.MSILZilla.5667
AhnLab-V3Trojan/Win.Agent.C4563970
McAfeeGenericRXQE-GM!7BB85B092784
MAXmalware (ai score=82)
VBA32Trojan.MSIL.gen.15
MalwarebytesRiskWare.Cymulate
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R03BC0PK221
FortinetRiskware/Cymulate
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove MSIL/Riskware.Cymulate.A?

MSIL/Riskware.Cymulate.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment