Trojan

Trojan-PSW.MSIL.Reline.ldt removal guide

Malware Removal

The Trojan-PSW.MSIL.Reline.ldt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-PSW.MSIL.Reline.ldt virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • CAPE detected the RedLine malware family
  • Binary compilation timestomping detected

How to determine Trojan-PSW.MSIL.Reline.ldt?


File Info:

name: 4BFD4777CD9DB1DF496B.mlw
path: /opt/CAPEv2/storage/binaries/387f4f9f056ed3b584daa96e7ed01017c29962bc689832d75b82a5f1d09c8e20
crc32: 83EAA528
md5: 4bfd4777cd9db1df496b8c820f09cab0
sha1: 60fc6422a32fa31f9e3b1f1e3dc76c8d96b0c639
sha256: 387f4f9f056ed3b584daa96e7ed01017c29962bc689832d75b82a5f1d09c8e20
sha512: a59f474575037e5a49cbe2c9b7d24aca9cae226c2e0a8b012529b9be9a503e458e682c794df5c856b5f4159bcf631b439891a0612b2ae889296c81cffbc1a844
ssdeep: 1536:xqskjlqzWlbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed2+3teulgS6pk:fYUeYr+zi0ZbYe1g0ujyzd4k
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T185A35D20679C9F19EAFD1B74B4B2012043F0E08A9091FB4B4DC164E71FA7B866957EF2
sha3_384: 176adfaa65fe35d09b89c11916964fbc970bd9bc4d55fa4efc2099ce3e4489af563f11b5fa844d77ae0a802c10554fca
ep_bytes: ff250020400000000000000000000000
timestamp: 2097-08-14 23:34:58

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: Implosions.exe
LegalCopyright:
OriginalFilename: Implosions.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan-PSW.MSIL.Reline.ldt also known as:

BkavW32.YopeaJonD.Trojan
tehtrisGeneric.Malware
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MsilFC.S24736542
ALYacIL:Trojan.MSILZilla.RedLine.22424
MalwarebytesGeneric.Spyware.Stealer.DDS
VIPREIL:Trojan.MSILZilla.RedLine.22424
SangforSuspicious.Win32.Save.a
K7AntiVirusSpyware ( 0057a2d41 )
K7GWSpyware ( 0057a2d41 )
Cybereasonmalicious.7cd9db
VirITTrojan.Win32.Genus.MAR
CyrenW32/MSIL_Agent.BJO.gen!Eldorado
SymantecTrojan Horse
ElasticWindows.Trojan.RedLineStealer
ESET-NOD32a variant of MSIL/Spy.RedLine.A
APEXMalicious
ClamAVWin.Malware.Bulz-9880537-0
KasperskyTrojan-PSW.MSIL.Reline.ldt
BitDefenderIL:Trojan.MSILZilla.RedLine.22424
MicroWorld-eScanIL:Trojan.MSILZilla.RedLine.22424
AvastWin32:MalwareX-gen [Trj]
TencentTrojan-PSW.MSIL.Reline.ha
EmsisoftTrojan-Spy.Agent (A)
F-SecureHeuristic.HEUR/AGEN.1305503
DrWebTrojan.PWS.Stealer.32288
ZillyaTrojan.Agent.Win32.2482722
McAfee-GW-EditionBehavesLike.Win32.Generic.nm
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.4bfd4777cd9db1df
SophosMal/Reline-B
IkarusTrojan-Spy.MSIL.Redline
JiangminTrojan.PSW.MSIL.cihh
AviraHEUR/AGEN.1305503
MAXmalware (ai score=87)
Antiy-AVLTrojan[Spy]/MSIL.Agent
MicrosoftPWS:MSIL/RedLine!atmn
ArcabitIL:Trojan.MSILZilla.RedLine.D5798
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
ZoneAlarmTrojan-PSW.MSIL.Reline.ldt
GDataMSIL.Trojan-Stealer.Redline.B
GoogleDetected
AhnLab-V3Infostealer/Win.RedLine.C4566112
McAfeeGenericRXPZ-SW!4BFD4777CD9D
TACHYONTrojan-PWS/W32.DN-Reline.97792.F
VBA32Trojan.MSIL.RedLine.Heur
Cylanceunsafe
ZonerTrojan.Win32.139086
RisingBackdoor.SectopRAT!1.DA27 (CLASSIC)
YandexTrojanSpy.Agent!vHYdwJoS9mU
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Spy.REDLINE.A!tr
BitDefenderThetaGen:NN.ZemsilF.36662.fm0@aCqvmhi
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan-PSW.MSIL.Reline.ldt?

Trojan-PSW.MSIL.Reline.ldt removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment