Malware

MSIL/Tiny.DE information

Malware Removal

The MSIL/Tiny.DE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Tiny.DE virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine MSIL/Tiny.DE?


File Info:

name: 6B7D5688937E8EEF3414.mlw
path: /opt/CAPEv2/storage/binaries/f5eff534cea2c2be2a8e8338ab39c09a0df161fe8ddc628c28a9a9807398a6ec
crc32: 6DA1666B
md5: 6b7d5688937e8eef3414db64643ec5d5
sha1: 7e5aa3b32bb54def297cbd7f88502aaf1c3128ca
sha256: f5eff534cea2c2be2a8e8338ab39c09a0df161fe8ddc628c28a9a9807398a6ec
sha512: 78940a2ec378ede5f9774c24e9c8127585f6643ad5f9c2beec8d19eb96c2948fd98c88525b692f3c9e5a9a215cb9f68f0053284d6e8265f72691fd4f46490f25
ssdeep: 192:T1m/0+/jBMSalx9WEBa3La9iYiaybfLM86y71o:I/0A2XPB0La9ifayPB6W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EC121915BBE44B36D0FE0B7968B687216371F1078E13CBAF1884615A6D733008A92BB2
sha3_384: 2c92621e9cd7c47dbae78049e5829405ae1ef7eaf85580d5b258bbadf22641b0fecd50ccd90a2039431036524533b3c1
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-05-19 04:52:43

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: ServiceHostV1000.exe
LegalCopyright:
OriginalFilename: ServiceHostV1000.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSIL/Tiny.DE also known as:

BkavW32.AIDetectNet.01
LionicTrojan.MSIL.Cardinal.m!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeGeneric.mg.6b7d5688937e8eef
McAfeeArtemis!6B7D5688937E
CylanceUnsafe
VIPRETrojan.GenericKD.33870688
SangforTrojan.Win32.Occamy.C
K7AntiVirusTrojan ( 005615361 )
AlibabaBackdoor:MSIL/Cardinal.30eeabd1
K7GWTrojan ( 005615361 )
Cybereasonmalicious.8937e8
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Tiny.DE
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Cardinal.gen
BitDefenderTrojan.GenericKD.33870688
NANO-AntivirusTrojan.Win32.Cardinal.hkjuhq
MicroWorld-eScanTrojan.GenericKD.33870688
AvastWin32:TrojanX-gen [Trj]
TencentMsil.Backdoor.Cardinal.Ncnw
Ad-AwareTrojan.GenericKD.33870688
EmsisoftTrojan.GenericKD.33870688 (B)
ComodoMalware@#179vd9fxzllfv
ZillyaTrojan.Tiny.Win32.15105
TrendMicroTROJ_GEN.R002C0GH722
McAfee-GW-EditionRDN/Generic BackDoor
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKD.33870688
JiangminBackdoor.MSIL.cydl
AviraHEUR/AGEN.1235020
Antiy-AVLTrojan/Generic.ASMalwS.4CA0
KingsoftWin32.Hack.Undef.(kcloud)
ArcabitTrojan.Generic.D204D360
MicrosoftBackdoor:Win32/Bladabindi!ml
GoogleDetected
AhnLab-V3Downloader/Win32.MSIL.R338746
BitDefenderThetaGen:NN.ZemsilF.34754.am0@aCd6KZb
ALYacTrojan.GenericKD.33870688
MAXmalware (ai score=88)
MalwarebytesMalware.AI.3825884978
TrendMicro-HouseCallTROJ_GEN.R002C0GH722
RisingBackdoor.Cardinal!8.E727 (CLOUD)
IkarusTrojan.MSIL.Tiny
MaxSecureTrojan.Malware.73797616.susgen
FortinetMSIL/Tiny.DE!tr
AVGWin32:TrojanX-gen [Trj]
PandaTrj/GdSda.A

How to remove MSIL/Tiny.DE?

MSIL/Tiny.DE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment