Trojan.MSIL.Cometer information

The Trojan.MSIL.Cometer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.MSIL.Cometer virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.MSIL.Cometer?


File Info:
crc32: 81DD152A
md5: 1ed3039c09cfac8bd651d48fcfb4847c
name: 1ED3039C09CFAC8BD651D48FCFB4847C.mlw
sha1: 4dc94c5adbf2814605af54e0a72d42bb64cdcb1e
sha256: 4726664a1167df53e184eaf298ce91c539a5c0ad60297706caf8eee472d26455
sha512: 2d1ba6f38d79dadc1f9f91e0bc6343a653c1d94028cb4bd7baeed3e6f401d8fbcdf85702092a135d9a958ea0458aba1aff3ce6ac29cffc56073ab2f42ecb05c0
ssdeep: 768:DS/regJ+Yr9MgbM6MFuT3WnhObkAApLu3oiIDNzeJku9vx/SF5Mbd0oC3d4Ooxn:2/regJ+Yr9knkbt
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020 Jiangxi. All rights reserved.
FileVersion: 7.3.6.5
CompanyName: Jiangxi
ProductName: Jiangxi Helper
ProductVersion: 7.3.6.5
FileDescription: An Excellent Software Developed By Jiangxi To Solove Your Problem.
Translation: 0x0409 0x04b0

Trojan.MSIL.Cometer also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.MSIL
ALYac	Trojan.GenericKD.37063208
Cylance	Unsafe
Zillya	Trojan.Cometer.Win32.2958
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Cometer.a0374308
Cybereason	malicious.adbf28
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.MSIL.Cometer.gen
BitDefender	Trojan.GenericKD.37063208
MicroWorld-eScan	Trojan.GenericKD.37063208
Tencent	Msil.Trojan.Cometer.Edep
Ad-Aware	Trojan.GenericKD.37063208
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dropper.Gen
BitDefenderTheta	Gen:NN.ZemsilF.34758.mm0@a8kebTfi
TrendMicro	TROJ_GEN.R011C0WFA21
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.1ed3039c09cfac8b
Emsisoft	Trojan.GenericKD.37063208 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.33722FB
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Generic.D2358A28
AegisLab	Trojan.Win32.Malicious.4!c
GData	Trojan.GenericKD.37063208
AhnLab-V3	Trojan/Win.Generic.C4521804
McAfee	RDN/Adware-Cometsys
MAX	malware (ai score=99)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R011C0WFA21
Ikarus	Trojan.Dropper
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Rozena.J!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan.MSIL.Cometer?

Trojan.MSIL.Cometer removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X