Trojan:MSIL/Nanocore.B removal tips

The Trojan:MSIL/Nanocore.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Nanocore.B virus can do?

Network activity detected but not expressed in API logs

How to determine Trojan:MSIL/Nanocore.B?


File Info:
crc32: EE1B5F32
md5: b9640cde0febad0071a277a5e68bddea
name: dipos1.exe
sha1: ea7952ebb7a5bb538848aacdbb08bbb82ac579c4
sha256: 01ed99703b1fe60bc19ffaa7e320fd0519e0e1dc2d0bb6fbcc08e8b2ed83767d
sha512: 1f7f385d5fc4be2c398630ac3c566c0d298a2a8bdf9a0ea6ee011a8439da84d0a70dc3729e7bfc295d45d69a8afc10d6bb6357d8d4a08ce97d1de849a0e1ad41
ssdeep: 3072:4brSxIiTPTt21+csZSkswXwshehs23Kphf4qC3Cstl4Bl0X:4brWRhy3kswXwsas23894qC3Cstlwl0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
0: [No Data]

Trojan:MSIL/Nanocore.B also known as:

DrWeb	Trojan.Siggen9.12010
FireEye	Generic.mg.b9640cde0febad00
Qihoo-360	HEUR/QVM03.0.516D.Malware.Gen
K7AntiVirus	Trojan ( 0056081c1 )
K7GW	Trojan ( 0056081c1 )
CrowdStrike	win/malicious_confidence_60% (W)
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZemsilF.34090.lmW@aau@iwF
APEX	Malicious
Paloalto	generic.ml
GData	Win32.Packed.Kryptik.M34BCT
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
Alibaba	Trojan:Win32/Maldoc.ali2000008
ViRobot	Trojan.Win32.Z.Kryptik.192512.RR
AegisLab	Trojan.MSIL.Crypt.4!c
TrendMicro	TROJ_GEN.R002C0PBH20
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Trapmine	malicious.high.ml.score
Ikarus	Trojan.MSIL.Inject
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.MSIL.Crypt.gen
Microsoft	Trojan:MSIL/Nanocore.B
Acronis	suspicious
McAfee	Packed-FWY!B9640CDE0FEB
MAX	malware (ai score=99)
Cylance	Unsafe
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/Kryptik.UQP
TrendMicro-HouseCall	TROJ_GEN.R002C0PBH20
Rising	Trojan.Kryptik!8.8 (CLOUD)
Fortinet	MSIL/Kryptik.UQP!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.bb7a5b
Avast	Win32:TrojanX-gen [Trj]

How to remove Trojan:MSIL/Nanocore.B?

Trojan:MSIL/Nanocore.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X