Trojan

Trojan.MsilFC.S23227522 removal guide

Malware Removal

The Trojan.MsilFC.S23227522 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.MsilFC.S23227522 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.MsilFC.S23227522?


File Info:

name: B6E6CEBCCFBE28778F7E.mlw
path: /opt/CAPEv2/storage/binaries/c71c63f1c790f3e297a44a1d266e7fd83bc1d2955b4e877ae6698e3817b5ff7c
crc32: 0DBFEE0E
md5: b6e6cebccfbe28778f7e6ac68a117e71
sha1: 4710b5347275bc984bc2c53bb1b76348a83f6cab
sha256: c71c63f1c790f3e297a44a1d266e7fd83bc1d2955b4e877ae6698e3817b5ff7c
sha512: 93bcfc8b89a432aab30c7079208106666855b6301c5266c14bf2abd02d2bfedcc277b846f685e46a1ab5ffcb09853ea7eda407c6ea834739c2e8a714c7cf2933
ssdeep: 24576:LnugJcycWz47/dDRFt//rGFnWkpqipz4bXju7e4OGM/jMxtWZKzh2Hs:i/dDRFt/iBaAzeju7eprjM2Kt2Hs
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T196550B3815B8393BE57AC339DEE4480BF6E4B45BB311EA1674D613670713A02B99327E
sha3_384: 8c55eb4c511fbdde92000aed0ffbf39069155ccb2dc8e0db52cf97c5ce036e115cc4a6b68a80dfa37dbf8176cf8e2893
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-08-17 01:25:27

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName: Microsoft
FileDescription: Self Cam
FileVersion: 5.5.0.2
InternalName: DESCUNI.exe
LegalCopyright: Copyright © Microsoft 2018 - 2021
LegalTrademarks:
OriginalFilename: DESCUNI.exe
ProductName: Self Cam
ProductVersion: 5.5.0.2
Assembly Version: 5.5.0.2

Trojan.MsilFC.S23227522 also known as:

LionicTrojan.MSIL.Bladabindi.m!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MsilFC.S23227522
ALYacTrojan.GenericKDZ.77145
MalwarebytesTrojan.Tasker
ZillyaBackdoor.Bladabindi.Win32.26197
SangforBackdoor.MSIL.Bladabindi.gen
K7AntiVirusTrojan ( 0058117c1 )
AlibabaBackdoor:MSIL/Bladabindi.0ef17198
K7GWTrojan ( 0058117c1 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/MSIL_Kryptik.FFV.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.ACMC
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
ClamAVWin.Packed.Generic-9886678-0
KasperskyHEUR:Backdoor.MSIL.Bladabindi.gen
BitDefenderTrojan.GenericKDZ.77145
NANO-AntivirusTrojan.Win32.Bladabindi.iztlvs
MicroWorld-eScanTrojan.GenericKDZ.77145
Ad-AwareTrojan.GenericKDZ.77145
SophosTroj/MSIL-ROI
DrWebTrojan.PackedNET.999
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PHK21
McAfee-GW-EditionBehavesLike.Win32.Generic.th
FireEyeTrojan.GenericKDZ.77145
EmsisoftTrojan.Agent (A)
IkarusTrojan.MSIL.Inject
GDataTrojan.GenericKDZ.77145
JiangminBackdoor.MSIL.eydm
AviraHEUR/AGEN.1145633
MAXmalware (ai score=81)
ArcabitTrojan.Generic.D12D59
MicrosoftTrojan:MSIL/AgentTesla.CMC!MTB
AhnLab-V3Trojan/Win.Generic.R437678
McAfeeAgentTesla-FCTJ!B6E6CEBCCFBE
VBA32TScope.Trojan.MSIL
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R002C0PHK21
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Kryptik.BPM!tr
BitDefenderThetaGen:NN.ZemsilF.34062.vr0@amB9w0m
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.47275b
Paloaltogeneric.ml
MaxSecureTrojan.Malware.73686729.susgen

How to remove Trojan.MsilFC.S23227522?

Trojan.MsilFC.S23227522 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment