Malware

Should I remove “MSIL:GenMalicious-AFS [Trj]”?

Malware Removal

The MSIL:GenMalicious-AFS [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL:GenMalicious-AFS [Trj] virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

crazy0love.no-ip.info

How to determine MSIL:GenMalicious-AFS [Trj]?


File Info:

crc32: 7FE26DBC
md5: e92e220c7e04afe4eb0455985828e3bb
name: E92E220C7E04AFE4EB0455985828E3BB.mlw
sha1: 519c1e40773beada5ec27d15db3eaf11af50f229
sha256: 1a0c295600dc3672920100b3afc12a7aaa3fdb36b0d9f1ca7736e4946cfba4a9
sha512: cc43d497b4d4fed21195d20b99d6533ce21f1f32d6657042ced046890198317483c5755aabe37ce843d5b5ffef556781c814a768b696555c0cab0c578748b71a
ssdeep: 3072:5EE5hq4kV1WJ20iWoKQ25ZbmifTglZOzedhN+H+cacPLSfdfG2USM2d2U2q:P3e4Gcf5MiklUzwKpP2fdfth7d2U2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: bdjzjvcd.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: bdjzjvcd.exe

MSIL:GenMalicious-AFS [Trj] also known as:

K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.MSIL.Disfa.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader7.48038
CynetMalicious (score: 100)
ALYacGen:Variant.MSILKrypt.19
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.c7e04a
BaiduMSIL.Trojan.Injector.u
SymantecML.Attribute.HighConfidence
ESET-NOD32MSIL/Bladabindi.O
APEXMalicious
AvastMSIL:GenMalicious-AFS [Trj]
ClamAVWin.Dropper.Generic-6503446-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.MSILKrypt.19
NANO-AntivirusTrojan.Win32.Bladabindi.eyxyps
MicroWorld-eScanGen:Variant.MSILKrypt.19
TencentMsil.Trojan.Disfa.Ajlm
Ad-AwareGen:Variant.MSILKrypt.19
SophosMal/Generic-S
ComodoMalware@#sno4ku6k5n6y
BitDefenderThetaGen:NN.ZemsilF.34236.om0@aOa2Y8
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.e92e220c7e04afe4
EmsisoftGen:Variant.MSILKrypt.19 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.agegk
WebrootW32.Malware.Gen
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/Generic.ASMalwS.19DC4A3
KingsoftWin32.Troj.Disfa.aw.(kcloud)
MicrosoftVirTool:MSIL/Obfuscator.AS!rebhip
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.MSILKrypt.19
McAfeeArtemis!E92E220C7E04
MAXmalware (ai score=83)
PandaGeneric Malware
YandexTrojan.Disfa!sPZaF2RDvpY
IkarusTrojan.Msil
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Injector.PE!tr
AVGMSIL:GenMalicious-AFS [Trj]
Paloaltogeneric.ml

How to remove MSIL:GenMalicious-AFS [Trj]?

MSIL:GenMalicious-AFS [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment