Trojan

Should I remove “Trojan:MSIL/Injector.CL!MTB”?

Malware Removal

The Trojan:MSIL/Injector.CL!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/Injector.CL!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:MSIL/Injector.CL!MTB?


File Info:

name: CAA92D89FB5A53E3975E.mlw
path: /opt/CAPEv2/storage/binaries/2207eeddac4a70cf3646cdcff82f0a52a5faa57af1d9b3624455eab8ffe7cfa4
crc32: 1734773A
md5: caa92d89fb5a53e3975edcff97f7eb45
sha1: 373f0096adc91abed3dd893e307b176e604a13b0
sha256: 2207eeddac4a70cf3646cdcff82f0a52a5faa57af1d9b3624455eab8ffe7cfa4
sha512: 7c01fffd4f58bcbf6be4a9403cd5a4c972e8e3c155f6f9aa1ecb0f25e0b87b23692463c2080e2330b112566d595060987dd951f5f90eb4ffa2a949849f94ea8d
ssdeep: 1536:RIs9iktzmZoUyKgYLX7uNbd8pHPIqnKtWrunzEa:G+cdr7uNMrKtWCnzEa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T142F4F10431AC85B6D5664EBA7EE23656537CA483593AABAE3F4C50379CB32215C03FA1
sha3_384: 2a85ce9874bb2242d89144501a51b33fb862b1087012b5364af0dd239581391c01ff63d615fd18081e8c51bab6778c58
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-05-20 07:56:31

Version Info:

Translation: 0x0000 0x04b0
Comments: VLC media player
CompanyName: VLC media player
FileDescription: VLC media player
FileVersion: 0.0.0.0
InternalName: testing 2.exe
LegalCopyright: Copyright © 1996-2018 VideoLAN and VLC Author
LegalTrademarks: VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
OriginalFilename: testing 2.exe
ProductName: VLC media player
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:MSIL/Injector.CL!MTB also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Variant.Zusy.469206
ALYacGen:Variant.Zusy.469206
MalwarebytesTrojan.MalPack.MSIL
VIPREGen:Variant.Zusy.469206
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderGen:Variant.Zusy.469206
K7GWTrojan ( 0056a61a1 )
K7AntiVirusTrojan ( 0056a61a1 )
ArcabitTrojan.Zusy.D728D6
BitDefenderThetaGen:NN.ZemsilF.36318.Um0@am0Eogn
VirITTrojan.Win32.MSIL_Heur.A
CyrenW32/Azorult.D.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Kryptik.UTK
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Backdoor.MSIL.Agent.gen
AlibabaBackdoor:MSIL/Kryptik.5e382a03
ViRobotTrojan.Win.Z.Kryptik.760320
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:dn2OUWTd2cV63JhohJVnxA)
SophosMal/Generic-S
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.PackedNET.198
ZillyaTrojan.Kryptik.Win32.4207160
TrendMicroTROJ_GEN.R023C0XEP23
McAfee-GW-EditionBehavesLike.Win32.Infected.bz
FireEyeGeneric.mg.caa92d89fb5a53e3
EmsisoftGen:Variant.Zusy.469206 (B)
IkarusTrojan.MSIL.Crypt
AviraTR/Dropper.Gen
MAXmalware (ai score=84)
Antiy-AVLTrojan/MSIL.Kryptik
MicrosoftTrojan:MSIL/Injector.CL!MTB
ZoneAlarmHEUR:Backdoor.MSIL.Agent.gen
GDataGen:Variant.Zusy.469206
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C5430901
Acronissuspicious
McAfeeArtemis!CAA92D89FB5A
TACHYONBackdoor/W32.DN-Agent.760320.B
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R023C0XEP23
TencentMsil.Backdoor.Agent.Etgl
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.11035479.susgen
FortinetMSIL/Kryptik.UTK!tr
AVGWin32:CrypterX-gen [Trj]
AvastWin32:CrypterX-gen [Trj]

How to remove Trojan:MSIL/Injector.CL!MTB?

Trojan:MSIL/Injector.CL!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment