Malware

Should I remove “Troj/MSIL-NKH”?

Malware Removal

The Troj/MSIL-NKH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/MSIL-NKH virus can do?

  • Network activity detected but not expressed in API logs

How to determine Troj/MSIL-NKH?


File Info:

crc32: 779F8D1F
md5: fc8f775b7a6a37ad9aaccfb72c5ecfc8
name: my.exe
sha1: 1d3c2c9ac3ab054bb5c1a1450f8379fe2c73d92e
sha256: 0d8a2b775446263966ca74d66f0c96b2e3225a9463f85a00ce64af02b8ed20ba
sha512: 77d7603c4f6790badbb7dd19ed89a6ed09c89113467ad881e993a8b998767949b926a6c942a85e1d3af58bf36bbe1d13c30635292bfe0649e79a09199f244bd2
ssdeep: 6144:dfUbr0eQBLL/nAmkowTsYiE5515PuVk1uIIblB5LCACiSKA8edC:lUbr0eqLh0sYB11ezLCAbVAz8
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2019
Assembly Version: 1.0.0.0
InternalName: 1209876.exe
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: 1209876.exe

Troj/MSIL-NKH also known as:

MicroWorld-eScanGen:Variant.Razy.590325
FireEyeGeneric.mg.fc8f775b7a6a37ad
McAfeeGenericRXJH-HP!FC8F775B7A6A
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 005302041 )
BitDefenderGen:Variant.Razy.590325
K7GWTrojan ( 005302041 )
Cybereasonmalicious.ac3ab0
Invinceaheuristic
BitDefenderThetaGen:NN.ZemsilF.33550.qm0@a4SiBBk
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:DropperX-gen [Drp]
GDataGen:Variant.Razy.590325
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:MSIL/Generic.10e28f8c
ViRobotTrojan.Win32.Z.Razy.262656.W
Ad-AwareGen:Variant.Razy.590325
SophosTroj/MSIL-NKH
ComodoMalware@#p7e6pfngfidq
TrendMicroTROJ_GEN.R01FC0GLF19
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Razy.590325 (B)
IkarusBackdoor.MSIL.Agent
JiangminTrojan.Generic.ejuvt
WebrootW32.Trojan.Emotet
AviraTR/Dldr.Agent.ruzsl
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (high confidence)
ArcabitTrojan.Razy.D901F5
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Tiggre!rfn
AhnLab-V3Trojan/Win32.RL_Agent.C3443135
Acronissuspicious
ALYacGen:Variant.Razy.590325
MAXmalware (ai score=83)
MalwarebytesTrojan.Crypt.MSIL.Generic
PandaGeneric Malware
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.FWF
TrendMicro-HouseCallTROJ_GEN.R01FC0GLF19
SentinelOneDFI – Suspicious PE
FortinetMSIL/Generic.FWF!tr
AVGWin32:DropperX-gen [Drp]
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360HEUR/QVM03.0.ED11.Malware.Gen

How to remove Troj/MSIL-NKH?

Troj/MSIL-NKH removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment