What is “Trojan.Quasar.MSIL”?

The Trojan.Quasar.MSIL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Quasar.MSIL virus can do?

Authenticode signature is invalid

How to determine Trojan.Quasar.MSIL?


File Info:
name: 6BE8DD336EEDDE83CA59.mlw
path: /opt/CAPEv2/storage/binaries/0ea8996a227da145133d13586204d6521af794a58ed84be9486b246bbe04ef8d
crc32: 43220D53
md5: 6be8dd336eedde83ca59982e18be3359
sha1: 689cb6bde73592beb431dbbd4fb5e8d0d2e8e263
sha256: 0ea8996a227da145133d13586204d6521af794a58ed84be9486b246bbe04ef8d
sha512: 51aee81cf005005e3852ce8b59f18f68b0aa363fbd5a00129192ae6a119f565fab58c109514d9baf121fc8e52b134fca1d3fe4207679fb8a89f03804e25f7505
ssdeep: 6144:W7NVT1HSFRZ1bibeYU2fFk4uvbvEQaD6iEHAsg:W7dcRZ1biRUvDHaW9gsg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15884390017E48A37E5BE17B5E87640549BFEF857E26AEB4F484098FA1D92315ED803E3
sha3_384: 3caa5ab13b17127189712031c046b33d6a62da4da8bab9fb1772d83109fd2b0fca675d286357f4bf170282442def4e53
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-03-08 07:40:36

Version Info:
Translation: 0x0000 0x04b0
Comments: Java(TM) Platform SE binary
CompanyName: 
FileDescription: Java
FileVersion: 1.1.0
InternalName: Client.exe
LegalCopyright: Copyright © 2022
LegalTrademarks: 
OriginalFilename: Client.exe
ProductName: Java(TM) Platform SE
ProductVersion: 1.1.0
Assembly Version: 1.1.0.0

Trojan.Quasar.MSIL also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Quasar.4!c
MicroWorld-eScan	IL:Trojan.MSILZilla.23526
McAfee	RDN/Generic PWS.y
Cylance	unsafe
Zillya	Trojan.Agent.Win32.3437186
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Spyware ( 00556f0b1 )
Alibaba	Trojan:MSIL/Quasar.05ad25c7
K7GW	Spyware ( 00556f0b1 )
Cybereason	malicious.36eedd
BitDefenderTheta	Gen:NN.ZemsilF.36250.wm0@aa62Ini
Cyren	W32/MSIL_Kryptik.DOD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Spy.Agent.CCY
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Quasar.gen
BitDefender	IL:Trojan.MSILZilla.23526
Avast	Win32:SpywareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13ba348f
Emsisoft	IL:Trojan.MSILZilla.23526 (B)
F-Secure	Heuristic.HEUR/AGEN.1307453
DrWeb	BackDoor.QuasarNET.3
VIPRE	IL:Trojan.MSILZilla.23526
TrendMicro	TROJ_GEN.R002C0WEA23
McAfee-GW-Edition	RDN/Generic PWS.y
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.6be8dd336eedde83
Sophos	Mal/Generic-S
Ikarus	Backdoor.Quasar
GData	IL:Trojan.MSILZilla.23526
Avira	HEUR/AGEN.1307453
Antiy-AVL	Trojan/MSIL.Quasar
Arcabit	IL:Trojan.MSILZilla.D5BE6
ZoneAlarm	HEUR:Trojan.MSIL.Quasar.gen
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Trojan/Win.MSILMamut.C5400357
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.23526
MAX	malware (ai score=81)
Malwarebytes	Trojan.Quasar.MSIL
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0WEA23
Rising	Spyware.Agent!8.C6 (CLOUD)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.BPH!tr
AVG	Win32:SpywareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Quasar.MSIL?

Trojan.Quasar.MSIL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X