MSIL/Runner.BD removal

The MSIL/Runner.BD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Runner.BD virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSIL/Runner.BD?


File Info:
name: 2C6F2993A473975C63E1.mlw
path: /opt/CAPEv2/storage/binaries/e95f9095604a1d6b1d6120ed17b5fb1af143355d99a006b61517dcd20f9408c5
crc32: DAF865C2
md5: 2c6f2993a473975c63e1d25e19f1e4ec
sha1: 1c18da11529483e12c27617aade73a597b747bec
sha256: e95f9095604a1d6b1d6120ed17b5fb1af143355d99a006b61517dcd20f9408c5
sha512: b32ccd97aa39f4f56e6c3c256d89a9776722e73fa0834b0006c747994444c92b3db63383864e024147ff5604638f82db721898a8509fa6aedc9605c5db05c4f3
ssdeep: 384:s8NYEvQg9gCpFg/uqIGUyq6dLCkYUF+7n2CO:s8NXQkgCL6TY6dLaznn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DCB3A121BA84C606D551023ECEA2C6F156A0FD55BC25DA173680FFFF39732176826B63
sha3_384: 3ab64f50c1cc4d622690c3c5a3dec0426df3e45a5cd98016763d3cdcb0a98703db7d076ae89a00a68d0692032f253bc6
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-10-15 00:48:25

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: 5k2ue24b.exe
LegalCopyright:  
OriginalFilename: 5k2ue24b.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSIL/Runner.BD also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	IL:Trojan.MSILZilla.21263
FireEye	Generic.mg.2c6f2993a473975c
McAfee	GenericRXAA-FA!2C6F2993A473
Cylance	Unsafe
VIPRE	IL:Trojan.MSILZilla.21263
Cybereason	malicious.3a4739
BitDefenderTheta	Gen:NN.ZemsilF.34726.gm0@aSfiLaf
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Runner.BD
APEX	Malicious
ClamAV	Win.Packed.Msilzilla-9972737-0
Kaspersky	HEUR:Hoax.MSIL.FakeRansom.gen
BitDefender	IL:Trojan.MSILZilla.21263
Avast	Win32:RansomX-gen [Ransom]
Ad-Aware	IL:Trojan.MSILZilla.21263
Emsisoft	IL:Trojan.MSILZilla.21263 (B)
F-Secure	Heuristic.HEUR/AGEN.1235062
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Malicious PE
GData	IL:Trojan.MSILZilla.21263
Google	Detected
Avira	HEUR/AGEN.1235062
MAX	malware (ai score=82)
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C5081937
ALYac	IL:Trojan.MSILZilla.21263
Malwarebytes	Malware.AI.2203918335
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:YDmMRrXEXCFKw5NuX9+S1A)
Fortinet	MSIL/Zilla.2126!tr.ransom
AVG	Win32:RansomX-gen [Ransom]

How to remove MSIL/Runner.BD?

MSIL/Runner.BD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X