Malware

Troj/MSIL-NLQ removal

Malware Removal

The Troj/MSIL-NLQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/MSIL-NLQ virus can do?

  • Network activity detected but not expressed in API logs

How to determine Troj/MSIL-NLQ?


File Info:

crc32: 5FB32A15
md5: 61e210e79acda002c135f3a882b2d08e
name: olandp.exe
sha1: 4db71e90005363900e3b782d7b21f84828a0de88
sha256: 8544c381cc0c64d1e04104a7dbf1627d970e0c048b1541b913ab6910ee3afddb
sha512: f9f5a023e739b61518f809ca07457b02c0d3751136159e5b5322aa10212e7654cf41b1d91c67df5c1babc0a1b00df25cc533e9a37167cfffce9a6b501513f572
ssdeep: 12288:7dMtfywAHc9lOEK3yq92M0WoIgJpD7zbPaR1XVIz/VJ7U6csDv:7ytfywAHc4iq92MLi5z6cz/z7U6cs
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2013 - 2019
Assembly Version: 0.0.0.0
InternalName: olandp.exe
FileVersion: 7.10.13.17
CompanyName: eB?8}a9G3Lg%Zx
Comments: T&c4!g8A3Gd/r
ProductName: wZ!92&tNdM%8L6g/
ProductVersion: 7.10.13.17
FileDescription: wZ!92&tNdM%8L6g/
OriginalFilename: olandp.exe

Troj/MSIL-NLQ also known as:

MicroWorld-eScanTrojan.GenericKD.32911838
FireEyeGeneric.mg.61e210e79acda002
McAfeeArtemis!61E210E79ACD
MalwarebytesTrojan.PCrypt.MSIL.Generic
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.GenericKD.32911838
K7GWTrojan ( 0055e2ff1 )
K7AntiVirusTrojan ( 0055e2ff1 )
SymantecML.Attribute.HighConfidence
APEXMalicious
GDataWin32.Trojan-Stealer.AgentTesla.ZCD115
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaTrojan:Win32/Kryptik.ali2000016
Endgamemalicious (moderate confidence)
EmsisoftTrojan.GenericKD.32911838 (B)
ComodoMalware@#1ysv5q59pfq8s
Invinceaheuristic
McAfee-GW-EditionArtemis!Trojan
SophosTroj/MSIL-NLQ
IkarusTrojan.MSIL.Crypt
WebrootW32.Trojan.Gen
MAXmalware (ai score=82)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D1F631DE
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
ALYacTrojan.Agent.Wacatac
Ad-AwareTrojan.GenericKD.32911838
CylanceUnsafe
ESET-NOD32a variant of MSIL/Kryptik.UFN
SentinelOneDFI – Malicious PE
FortinetMSIL/Kryptik.UFN!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Generic/Trojan.PSW.374

How to remove Troj/MSIL-NLQ?

Troj/MSIL-NLQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment