Malware

MSIL:GenMalicious-CJ [Trj] removal instruction

Malware Removal

The MSIL:GenMalicious-CJ [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL:GenMalicious-CJ [Trj] virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • A process was set to shut the system down when terminated
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Unusual version info supplied for binary

Related domains:

z.whorecord.xyz
a.tomx.xyz
microsoft10.zapto.org

How to determine MSIL:GenMalicious-CJ [Trj]?


File Info:

crc32: BC770D58
md5: 9c56cdda703d07a6b2ebe241eef7c848
name: 9C56CDDA703D07A6B2EBE241EEF7C848.mlw
sha1: dfe1392fe2daa81181bbcf7db80286f902bc710c
sha256: a778b9ef89eab3325c33e1db5a749e09e4aa68772f22f066e2fe28c3e027e904
sha512: 52654fd4f4afbed4116a7ab945525924e7e364757daec3b567e2cb214743828d6698e6ca8d26136a91da31d6154bb0876c338603688bdfc1eaffbf22e6d0179d
ssdeep: 1536:Fdt1iDf3QbOLA4CAobs/ZPP6H8aoZAEIk:Fgr3QA/ZPP6H8fZAEp
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright by Microsoft 2012
Assembly Version: 4.2.4.5
InternalName: Chrome.exe
FileVersion: 4.1.5.x200b0
CompanyName: Windows
LegalTrademarks: Windows
Comments: Windows
ProductName: Windows
ProductVersion: 4.1.5.x200b0
FileDescription: Processus hxf4te pour les services Windows
OriginalFilename: Chrome.exe

MSIL:GenMalicious-CJ [Trj] also known as:

K7AntiVirusTrojan ( 004912021 )
LionicTrojan.Win32.Blocker.j!c
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner2.5392
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.32074
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/Blocker.4ad44374
K7GWTrojan ( 004912021 )
Cybereasonmalicious.a703d0
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.CIG
APEXMalicious
AvastMSIL:GenMalicious-CJ [Trj]
KasperskyTrojan-Ransom.Win32.Blocker.htvp
NANO-AntivirusTrojan.Win32.Blocker.gblcpy
TencentWin32.Trojan.Blocker.Huze
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34142.dm0@aa5pYaj
VIPRETrojan.Win32.Generic!BT
FireEyeGeneric.mg.9c56cdda703d07a6
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Blocker.qt
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/Generic.ASMalwS.1526E95
MicrosoftBackdoor:MSIL/Bladabindi!rfn
Acronissuspicious
McAfeeTrojan-FDWX!9C56CDDA703D
VBA32Hoax.Blocker
MalwarebytesMachineLearning/Anomalous.100%
PandaTrj/CI.A
YandexTrojan.Blocker!azk2e1itk+c
IkarusTrojan.Msil
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/CIG.FDWX!tr
AVGMSIL:GenMalicious-CJ [Trj]
Paloaltogeneric.ml

How to remove MSIL:GenMalicious-CJ [Trj]?

MSIL:GenMalicious-CJ [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment