Trojan

What is “Trojan-Downloader.MSIL.Alien.nr”?

Malware Removal

The Trojan-Downloader.MSIL.Alien.nr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.MSIL.Alien.nr virus can do?

  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Trojan-Downloader.MSIL.Alien.nr?


File Info:

name: 468750AADB4BC088497B.mlw
path: /opt/CAPEv2/storage/binaries/2681278652e0b845f8a05172a4d4fbbff286e53700caee7a2719ac3be4d3330b
crc32: B3670EB4
md5: 468750aadb4bc088497b470d7e850227
sha1: 0d5a9999787445278b06351e995cec6b0b38f5c3
sha256: 2681278652e0b845f8a05172a4d4fbbff286e53700caee7a2719ac3be4d3330b
sha512: 7af2495cbf14884e22a18f37dbf81ee99b57f444405747ddc7b41874e6b7f6a07e7485934f8f2fc58de4d43eea8ae712163c44afb7248fc17409fe6e7ecdf85e
ssdeep: 768:tEHP8oNQq9ugEhkBn3HQVOaVM41v1+bV53gm3HrdY:tEHP8oNBDEhkyIyar3X3O
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18D034A2969ADC41BC76F42BC78F60A108B70E2925E17DB44BDAC859F2BB730448357DB
sha3_384: 7f9484cd70af8c95447cad01e74a1fbc83205ab51f1a8667caa7addd054f3c7350e2798cb863ba77ba23223f4e19396a
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-01-22 14:14:24

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: 1234.exe
LegalCopyright:
OriginalFilename: 1234.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan-Downloader.MSIL.Alien.nr also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Alien.a!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.71305050
FireEyeTrojan.GenericKD.71305050
SkyhighBehavesLike.Win32.Dropper.nm
McAfeeArtemis!468750AADB4B
MalwarebytesGeneric.Malware/Suspicious
SangforDownloader.Win32.Alien.Vjxh
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:MSIL/Alien.e728a540
SymantecML.Attribute.HighConfidence
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0XAS24
KasperskyTrojan-Downloader.MSIL.Alien.nr
BitDefenderTrojan.GenericKD.71305050
NANO-AntivirusTrojan.Win32.Alien.kifxut
AvastWin32:Malware-gen
EmsisoftTrojan.GenericKD.71305050 (B)
GoogleDetected
F-SecureTrojan.TR/Redcap.uedqv
VIPRETrojan.GenericKD.71305050
TrendMicroTROJ_GEN.R002C0XAS24
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusTrojan.Msil
VaristW32/ABRisk.KOOT-3980
AviraTR/Redcap.uedqv
Antiy-AVLTrojan[Downloader]/MSIL.Alien
Kingsoftmalware.kb.c.912
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D440075A
ZoneAlarmTrojan-Downloader.MSIL.Alien.nr
GDataTrojan.GenericKD.71305050
VBA32TScope.Trojan.MSIL
ALYacTrojan.GenericKD.71305050
MAXmalware (ai score=82)
Cylanceunsafe
PandaTrj/GdSda.A
RisingDownloader.Alien!8.E322 (CLOUD)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.230890703.susgen
FortinetPossibleThreat
AVGWin32:Malware-gen
Cybereasonmalicious.adb4bc
DeepInstinctMALICIOUS
alibabacloudTrojan[downloader]:MSIL/Alien.nr

How to remove Trojan-Downloader.MSIL.Alien.nr?

Trojan-Downloader.MSIL.Alien.nr removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment