Trojan

About “Trojan:MSIL/Injector.CP!MTB” infection

Malware Removal

The Trojan:MSIL/Injector.CP!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/Injector.CP!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Trojan:MSIL/Injector.CP!MTB?


File Info:

name: 487A5304DFA9F947339F.mlw
path: /opt/CAPEv2/storage/binaries/bc2daead2495b105daf35672cf27e9784268bc4f89e0c8e6ff541491aa0de4ff
crc32: 63A0F092
md5: 487a5304dfa9f947339fcf7d5ae552f5
sha1: 225fb8b7e03c449eaa0ff8ab65fb9d8f35c4b903
sha256: bc2daead2495b105daf35672cf27e9784268bc4f89e0c8e6ff541491aa0de4ff
sha512: a3ddb169963a88c02b813ecc934dc6a108160f5f44c2a5821608f8963e486f2b9726dabe5ff244a2aaa818f223baca6686384bf21d75617e6928b991fd3f7514
ssdeep: 384:arScHnC6Z0PL+zvXXPm+PP+yX/2qfP/mLn22X+XWu+mePXDn22X+XW7n22X+XWeb:hcpE+zvXXPm+PP+yX/2qfP/mLn22X+Xr
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D952833AE78A5DB0EADFDBB914E202130A30D4D60A13DBDE64C453B7FB852D2855036D
sha3_384: 39cb4b8f59ec2734fca3482632bc83ea3ddeac0ee2d5b87383d54ef2ab6eb2ae2d7bf806eb06588d69ae247d56757f95
ep_bytes: ff250020001000000000000000000000
timestamp: 2021-10-19 13:07:22

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: igkhntja.dll
LegalCopyright:
OriginalFilename: igkhntja.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:MSIL/Injector.CP!MTB also known as:

BkavW32.AIDetectMalware.CS
DrWebTrojan.Siggen11.62021
MicroWorld-eScanGen:Variant.Tedy.1958
SkyhighTrojan-FTXB!487A5304DFA9
McAfeeTrojan-FTXB!487A5304DFA9
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Injector.ef618d13
K7GWTrojan ( 00588a941 )
K7AntiVirusTrojan ( 00588a941 )
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Runner.AT
APEXMalicious
ClamAVWin.Packed.Bulz-9891112-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Tedy.1958
AvastWin32:MalwareX-gen [Trj]
TencentTrojan.Win32.Injector.hf
EmsisoftGen:Variant.Tedy.1958 (B)
F-SecureTrojan.TR/Dropper.Gen
VIPREGen:Variant.Tedy.1958
FireEyeGeneric.mg.487a5304dfa9f947
SophosTroj/MSILIn-BFE
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=84)
GoogleDetected
AviraTR/Dropper.Gen
VaristW32/MSIL_Troj.C.gen!Eldorado
Antiy-AVLTrojan/Win32.Generic
MicrosoftTrojan:MSIL/Injector.CP!MTB
XcitiumMalware@#qdjjy19isxvr
ArcabitTrojan.Tedy.D7A6
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Tedy.1958
AhnLab-V3Trojan/Win32.RL_Generic.C4334637
VBA32TScope.Trojan.MSIL
ALYacGen:Variant.Tedy.1958
Cylanceunsafe
PandaTrj/GdSda.A
IkarusTrojan.MSIL.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Injector.VKE!tr
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan:MSIL/Injector.CP!MTB?

Trojan:MSIL/Injector.CP!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment