Troj/MSIL-PYX information

The Troj/MSIL-PYX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/MSIL-PYX virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs

How to determine Troj/MSIL-PYX?


File Info:
crc32: 5EDEEAD9
md5: fd805f6b86289e0f4c35c38f1ea352f9
name: upload_file
sha1: b3beb8d9f14cd3d89fbc17b4a702d2d54e5194aa
sha256: b880aa0040b5f386b895c23af6b05c18473eb9db95ec3942e713fc454c6f4cef
sha512: 73905ffadcd11c26be5323b82687b70e1db15992630e6cc1c5fcc919d7b1311d936a2ca5865b9a5fab2a575843683dd1b82776bc98ef82db39571650cb209464
ssdeep: 768:9YHCr7tIk1nfX+JIn+uMpPPuvVjgMym23hOAEUf2hq:MwxIAn/H6Mym23NEUfr
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Microsoft Corp. All rights reserved.
Assembly Version: 11.0.2809.27
FileVersion: 2011.110.2809.27
CompanyName: Microsoft Corporation
LegalTrademarks: Microsoft SQL Server is a registered trademark of Microsoft Corporation.
Comments: SQL
ProductName: Microsoft SQL Server
ProductVersion: 11.0.2809.27
FileDescription: SQL External minidumper
OriginalFilename: Microsoft SQL Server.exe
Translation: 0x0409 0x0514

Troj/MSIL-PYX also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34775046
FireEye	Trojan.GenericKD.34775046
McAfee	Artemis!FD805F6B8628
Sangfor	Malware
BitDefender	Trojan.GenericKD.34775046
K7GW	Trojan-Downloader ( 005710171 )
TrendMicro	Trojan.Win32.WOREFLINT.USMANJE20
BitDefenderTheta	Gen:NN.ZemsilF.34566.cm1@aOvvv!ji
Cyren	W32/Trojan.LLXX-7745
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	HEUR:Trojan.MSIL.PowerShell.gen
Alibaba	Trojan:MSIL/PowerShell.67713c34
Ad-Aware	Trojan.GenericKD.34775046
Emsisoft	Trojan.GenericKD.34775046 (B)
F-Secure	Trojan.TR/Dropper.Gen
Invincea	Mal/Generic-S + Troj/MSIL-PYX
McAfee-GW-Edition	PWS-FCRO!FD805F6B8628
Sophos	Troj/MSIL-PYX
Webroot	W32.Trojan.Gen
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Woreflint.A!cl
Arcabit	Trojan.Generic.D212A006
ZoneAlarm	HEUR:Trojan.MSIL.PowerShell.gen
GData	Trojan.GenericKD.34775046
AhnLab-V3	Trojan/Win32.MSILKrypt.C4206356
ALYac	Trojan.GenericKD.34775046
MAX	malware (ai score=86)
Malwarebytes	Trojan.Downloader
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.GWW
TrendMicro-HouseCall	Trojan.Win32.WOREFLINT.USMANJE20
Ikarus	Trojan.Inject
Fortinet	MSIL/Agent.GWV!tr.dldr
AVG	FileRepMetagen [Malware]
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Troj/MSIL-PYX?

Troj/MSIL-PYX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X