Trojan

Should I remove “Trojan.MSIL.SunBurst”?

Malware Removal

The Trojan.MSIL.SunBurst is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.MSIL.SunBurst virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.MSIL.SunBurst?


File Info:

crc32: 4E42489C
md5: e18a6a21eb44e77ca8d739a72209c370
name: E18A6A21EB44E77CA8D739A72209C370.mlw
sha1: 5e643654179e8b4cfe1d3c1906a90a4c8d611cea
sha256: a25cadd48d70f6ea0c4a241d99c5241269e6faccb4054e62d16784640f8e53bc
sha512: 17b4de6158de054c02849bb728b9767208d3f07ef18d4dc41963a370d34e9dbcf7cc4b729726903f1a7afd4ef7e8c1d781c20a3049a2c160dede23614352f11c
ssdeep: 24576:ldBfeHcrhCECR1R/zoi8SHoN0W8vB8O3Icu:5e8nK/zopSHoN0W8vB83
type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 1999-2019 SolarWinds Worldwide, LLC. All Rights Reserved.
Assembly Version: 2019.4.5200.8890
InternalName: SolarWinds.Orion.Core.BusinessLayer.dll
FileVersion: 2019.4.5200.8890
CompanyName: SolarWinds Worldwide, LLC.
LegalTrademarks:
Comments:
ProductName: SolarWinds.Orion.Core.BusinessLayer
ProductVersion: 2019.4.5200.8890
FileDescription: SolarWinds.Orion.Core.BusinessLayer
OriginalFilename: SolarWinds.Orion.Core.BusinessLayer.dll

Trojan.MSIL.SunBurst also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.SiggenNET.14
McAfeeTrojan-sunburst
CylanceUnsafe
CyrenW32/Trojan.AUTX-7453
ComodoBackdoor@#119pq65qsxn1x
McAfee-GW-EditionTrojan-sunburst
IkarusBackdoor.Sunburst
MicrosoftTrojan:MSIL/Solorigate.BR!dha
Acronissuspicious
ALYacTrojan.MSIL.SunBurst
MalwarebytesBackdoor.Sunburst
PandaTrj/Solorigate.A
FortinetW32/Sunburst.A!tr
Qihoo-360Trojan.Generic

How to remove Trojan.MSIL.SunBurst?

Trojan.MSIL.SunBurst removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment