About “MSIL/Tiny.CE” infection

The MSIL/Tiny.CE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Tiny.CE virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Tiny.CE?


File Info:
crc32: 8B89AC4E
md5: 5a2a64768d59124cf793a29b14f0b4b1
name: 5A2A64768D59124CF793A29B14F0B4B1.mlw
sha1: b755ab5c33aa590c5d3071f956c9b47cef2368c9
sha256: 4f546c2945c0cb87ac8cd27f69173f9283b73d6bcab0e2e2712581362cdbe353
sha512: 0f0c16faca041612b3ce2e0ae33ed23da17a3a71f12c40ef8e0be143915d5ee3051314ad9bd934db79b07a4508f11e2efb435c85a85a81ebc0c29e16c4440c6a
ssdeep: 96:ZgFN43KM0nSMw1KKVI/ncdJKCC52ApEtIDKr8WhJzzNt:Zg0KMUdKVI/nMRA04WfV
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2013
Assembly Version: 1.0.0.0
InternalName: z.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
ProductName: z
ProductVersion: 1.0.0.0
FileDescription: z
OriginalFilename: z.exe

MSIL/Tiny.CE also known as:

MicroWorld-eScan	Gen:Variant.Ursu.824539
FireEye	Gen:Variant.Ursu.824539
McAfee	Artemis!5A2A64768D59
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Agent.atgen
K7AntiVirus	Spyware ( 0057179c1 )
BitDefender	Gen:Variant.Ursu.824539
K7GW	Spyware ( 0057179c1 )
Cybereason	malicious.68d591
BitDefenderTheta	Gen:NN.ZemsilF.34590.am0@aGLuDQ
Cyren	W32/Trojan.XXJM-4031
Symantec	ML.Attribute.HighConfidence
Kaspersky	Trojan-Ransom.Win32.Blocker.awqx
Alibaba	Ransom:Win32/Blocker.dcc9ba83
NANO-Antivirus	Trojan.Win32.Blocker.cxgtrq
Ad-Aware	Gen:Variant.Ursu.824539
Sophos	Mal/Generic-S
Comodo	Malware@#2r65gbcb7t8pe
F-Secure	Trojan.TR/Kazy.159861.1
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Ursu.824539 (B)
Avira	TR/Kazy.159861.1
Arcabit	Trojan.Ursu.DC94DB
AegisLab	Trojan.Win32.Blocker.4!c
ZoneAlarm	Trojan-Ransom.Win32.Blocker.awqx
GData	Gen:Variant.Ursu.824539
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.Blocker.C1216830
VBA32	Hoax.Blocker
MAX	malware (ai score=100)
Panda	Generic Malware
ESET-NOD32	a variant of MSIL/Tiny.CE
Tencent	Win32.Trojan.Blocker.Svhq
Fortinet	W32/Blocker.AWQX!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
Qihoo-360	Win32/Trojan.734

How to remove MSIL/Tiny.CE?

MSIL/Tiny.CE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X