Trojan

About “Trojan.MSIL.Tasker” infection

Malware Removal

The Trojan.MSIL.Tasker is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.MSIL.Tasker virus can do?

  • Creates RWX memory
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Trojan.MSIL.Tasker?


File Info:

crc32: 61929700
md5: 43b2df32bd2d9d73cae79ae90e2408f0
name: 43B2DF32BD2D9D73CAE79AE90E2408F0.mlw
sha1: 19d928bf9a0284dd364cc491b9cb3d54b46f6f7c
sha256: cb1dbc3bf06c04706a39c896babc209c132ff626ce264434e97bc8572dac2e12
sha512: e4b7b0bde674954a1f58cd664678ec5159f3e0da73d2e36315f2c508e42dddc5ac8790f27562d87b65b0ae699fe80e933a63021772bd09e99a281683a21e095c
ssdeep: 96:8HDwJ/BYghas50lFF0fP679k+cwInyLE1+:GwZjEjF0fPc9k+cmLr
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Dark Clipper.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Dark Clipper.exe

Trojan.MSIL.Tasker also known as:

K7AntiVirusTrojan ( 0054ea9c1 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop11.33544
CynetMalicious (score: 100)
ALYacTrojan.Autoruns.GenericKDS.45365330
CylanceUnsafe
ZillyaTrojan.ClipBanker.Win32.3893
AlibabaTrojan:MSIL/ClipBanker.094732ee
K7GWTrojan ( 0054ea9c1 )
Cybereasonmalicious.2bd2d9
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/ClipBanker.JJ
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
KasperskyHEUR:Trojan.MSIL.Tasker.gen
BitDefenderTrojan.Autoruns.GenericKDS.45365330
NANO-AntivirusTrojan.Win32.Tasker.hsmovr
MicroWorld-eScanTrojan.Autoruns.GenericKDS.45365330
TencentMsil.Trojan.Tasker.Pdck
Ad-AwareTrojan.Autoruns.GenericKDS.45365330
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34628.am0@aaEFhZk
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Trojan.xt
FireEyeGeneric.mg.43b2df32bd2d9d73
EmsisoftTrojan.Autoruns.GenericKDS.45365330 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.MSIL.qigs
AviraHEUR/AGEN.1139586
eGambitUnsafe.AI_Score_98%
MicrosoftTrojan:MSIL/ClipBanker.GB!MTB
ArcabitTrojan.Autoruns.GenericS.D2B43852
AegisLabTrojan.MSIL.Tasker.4!c
GDataTrojan.Autoruns.GenericKDS.45365330
AhnLab-V3Trojan/Win32.Tasker.R332708
McAfeeGenericRXJI-ZR!43B2DF32BD2D
MAXmalware (ai score=89)
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.ClipBanker.MSIL
PandaTrj/GdSda.A
RisingTrojan.ClipBanker!8.5FB (CLOUD)
IkarusTrojan.MSIL.ClipBanker
FortinetMSIL/ClipBanker.JJ!tr
AVGWin32:TrojanX-gen [Trj]
Qihoo-360Win32/Backdoor.Tasker.HgIASOQA

How to remove Trojan.MSIL.Tasker?

Trojan.MSIL.Tasker removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment