Troj/MSIL-PLB removal tips

The Troj/MSIL-PLB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/MSIL-PLB virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Troj/MSIL-PLB?


File Info:
crc32: 5C80CB88
md5: 3af69916bb6b831cffe61d3e4c0ad040
name: SWIFT MESAJI.exe
sha1: f7c3211c565271054e47a7ea8e9989c887bdeed5
sha256: 9aee439e11def97d65bee7c09d7dc567edaae51804fba8ce3478fba0107ed892
sha512: 0102153a43d0c94633f3bce75c1afc110a6e93d7daba501e5fbbb2670564ffae82748780e7a82908f83d98c09c0e8edf63b22b1bd996a420823f9519b126d909
ssdeep: 12288:N+nRnLg+RDJqu9ujBr2Ji3Hy8p3PtaEReBrh3oYvV11ds4xZ8XIQtduJg3cD:NsRnLlJJqu9ujBrryWtHUr7Lrs4PO
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Sedan (C)  2001
Assembly Version: 1.0.0.132
InternalName: CZtIC.exe
FileVersion: 1.0.0.136
CompanyName: Sedan sde
Comments: Hybrid vehicle
ProductName: Hybrid
ProductVersion: 1.0.0.136
FileDescription: Hybrid
OriginalFilename: CZtIC.exe

Troj/MSIL-PLB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34261268
FireEye	Generic.mg.3af69916bb6b831c
McAfee	Fareit-FXU!3AF69916BB6B
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Trojan.GenericKD.34261268
K7GW	Trojan ( 0056b9c81 )
Cybereason	malicious.c56527
Invincea	heuristic
F-Prot	W32/MSIL_Troj.YA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
ViRobot	Trojan.Win32.Z.Masslogger.803840
AegisLab	Trojan.Win32.Generic.4!c
Rising	Trojan.Crypt!8.2E3 (CLOUD)
Ad-Aware	Trojan.GenericKD.34261268
Sophos	Troj/MSIL-PLB
F-Secure	Trojan.TR/Kryptik.eidcb
TrendMicro	TROJ_GEN.R044C0DGV20
Emsisoft	Trojan.GenericKD.34261268 (B)
Ikarus	Trojan-Spy.MassLogger
Cyren	W32/MSIL_Troj.YA.gen!Eldorado
Webroot	W32.Malware.Gen
Avira	TR/Kryptik.eidcb
MAX	malware (ai score=87)
Arcabit	Trojan.Generic.D20AC914
ZoneAlarm	HEUR:Trojan.MSIL.Crypt.gen
Microsoft	TrojanSpy:MSIL/AgentTesla.AQ!MTB
AhnLab-V3	Trojan/Win32.Lokibot.R346415
BitDefenderTheta	Gen:NN.ZemsilF.34144.Xm0@a0abAlj
ALYac	Spyware.LokiBot
VBA32	CIL.HeapOverride.Heur
Malwarebytes	Trojan.MalPack.PNG.Generic
ESET-NOD32	a variant of MSIL/Kryptik.XDK
TrendMicro-HouseCall	TROJ_GEN.F0D1C00GU20
Tencent	Win32.Trojan.Inject.Auto
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
GData	Win32.Trojan-Stealer.AgentTesla.I1VK67
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)
Qihoo-360	Generic/Trojan.21a

How to remove Troj/MSIL-PLB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Troj/MSIL-PLB removal tips