Trojan.MalPack.Caesar removal instruction

The Trojan.MalPack.Caesar is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.MalPack.Caesar virus can do?

Network activity detected but not expressed in API logs

How to determine Trojan.MalPack.Caesar?


File Info:
crc32: 29A662A7
md5: ed84647fc5655a98cc5fd12250876487
name: reg1.exe
sha1: 4b77f807e2cc884a7140d45554ca042346b1f5f9
sha256: d620cee5d3f837c2b3012f301a4b6a2d2a0b68619c9fe9d7a3c3da880d6d6dd9
sha512: 549f05a1e1a5692b9b05a882f7a686df20ed336185b87d34520b3fc8bf8ade1997b28ef7708f843db0c35273a2da14416df92115564473e667c45951984f4014
ssdeep: 6144:MMYGFvUt/Xw3RPs3pR2GhNUM3Zlk0+XmORcF4YFjEdUY6XdDOkUj3KFMWXDm:hYGFcpXw3RmP2iNUMUWd3uD6XdDOkfF
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2012 - 2019
Assembly Version: 0.0.0.0
InternalName: reg1.exe
FileVersion: 7.10.13.17
CompanyName: oF&43_pBqW/98aN~m
Comments: A/g53J!b~wN74L%p@
ProductName: Nm8|4)qL#X5f2
ProductVersion: 7.10.13.17
FileDescription: Nm8|4)qL#X5f2
OriginalFilename: reg1.exe

Trojan.MalPack.Caesar also known as:

FireEye	Generic.mg.ed84647fc5655a98
Cylance	Unsafe
Sangfor	Malware
Cybereason	malicious.7e2cc8
BitDefenderTheta	Gen:NN.ZemsilF.34132.Hm0@aq3rHKh
F-Prot	W32/MSIL_Kryptik.AWA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.WUC
APEX	Malicious
Paloalto	generic.ml
GData	MSIL.Backdoor.Nancat.2Q11UM
Kaspersky	HEUR:Backdoor.MSIL.NanoBot.gen
F-Secure	Trojan.TR/Spy.Tesla.sbeoo
Cyren	W32/MSIL_Kryptik.AWA.gen!Eldorado
Avira	TR/Spy.Tesla.sbeoo
MAX	malware (ai score=99)
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Backdoor.MSIL.NanoBot.gen
Microsoft	TrojanSpy:MSIL/AgentTesla.RA!MTB
Cynet	Malicious (score: 85)
McAfee	Artemis!ED84647FC565
Malwarebytes	Trojan.MalPack.Caesar
TrendMicro-HouseCall	TROJ_GEN.R002H01GB20
Rising	Trojan.Kryptik!8.8 (CLOUD)
SentinelOne	DFI – Malicious PE
eGambit	RAT.NanoCore
Fortinet	MSIL/Kryptik.WUC!tr
Webroot	W32.Malware.Gen
AVG	MSIL:NanoCore-B [Trj]
Avast	MSIL:NanoCore-B [Trj]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	HEUR/QVM03.0.7C63.Malware.Gen

How to remove Trojan.MalPack.Caesar?

Trojan.MalPack.Caesar removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X