What is "Trojan:MSIL/Sdnldr.GG!MTB"?

The Trojan:MSIL/Sdnldr.GG!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/Sdnldr.GG!MTB virus can do?

Drops a binary and executes it
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:MSIL/Sdnldr.GG!MTB?


File Info:
crc32: F87A6D1A
md5: f7b0860fc9a11848db11959bbd0f81f0
name: insoskill.exe
sha1: 62810f24c03af1842fc9bb97f5875ce049ed7e83
sha256: 4c7e8db038cc0bb3ed908b2d3d11f535dcf29a1b5468f723d824efb527534ebc
sha512: adc99bd051e01e0c777eed72387629c697e15950f35a50326e2035cdf3749ca07b392c9da4cf1799d1dbbb4879e48575ad7ce8fb71957886da17fb108b8fafb1
ssdeep: 6144:RSncRlpbfWQDeA8vkt4uC5EKk1noFjkMBzGXRNNhAqup7g:g4BykY21ouvTNduC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan:MSIL/Sdnldr.GG!MTB also known as:

Bkav	W32.GenericBinderLnr.Trojan
MicroWorld-eScan	Dropped:Generic.Malware.Tk.532FC72E
CMC	HackTool.Win32.Binder!O
CAT-QuickHeal	VirTool.Vbinder.CO5
Qihoo-360	Win32/Trojan.Hacktool.4af
McAfee	Trojan-FDDZ!F7B0860FC9A1
Cylance	Unsafe
SUPERAntiSpyware	Trojan.Agent/Gen-Binder
Sangfor	Malware
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Win32/BlueArmy.2d2
K7GW	Trojan ( 0055e3df1 )
K7AntiVirus	Trojan ( 0055e3df1 )
F-Prot	W32/Backdoor2.HKXU
Symantec	SMG.Heur!gen
TotalDefense	Win32/Tnega.AGBZ
Baidu	Win32.Trojan-Dropper.Binder.m
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Trojan.Binder-6
Kaspersky	HackTool.Win32.Binder.bs
BitDefender	Dropped:Generic.Malware.Tk.532FC72E
AegisLab	Hacktool.Win32.Binder.lo77
Rising	Dropper.Binder!1.AEB1 (CLOUD)
Endgame	malicious (high confidence)
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.TrojanDropper.Binder.cls@4m6ovz
F-Secure	Trojan.TR/Dldr.Agent.luszz
DrWeb	Trojan.MulDrop2.39589
VIPRE	Trojan-Dropper.Win32.Binder.bs (v)
TrendMicro	TROJ_GEN.R002C0DDQ20
McAfee-GW-Edition	BehavesLike.Win32.Dropper.fh
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.f7b0860fc9a11848
Emsisoft	Dropped:Generic.Malware.Tk.532FC72E (B)
SentinelOne	DFI – Suspicious PE
Cyren	W32/Backdoor.FVDJ-1096
Jiangmin	HackTool.Binder.bh
Avira	TR/Dldr.Agent.luszz
MAX	malware (ai score=87)
Antiy-AVL	Trojan/MSIL.Sdnldr
Microsoft	Trojan:MSIL/Sdnldr.GG!MTB
Arcabit	Generic.Malware.Tk.532FC72E
ViRobot	Trojan.Win32.A.Swisyn.49120
ZoneAlarm	HackTool.Win32.Binder.bs
GData	Win32.Trojan.Binder.A
AhnLab-V3	HackTool/Win32.Vbinder.R12127
Acronis	suspicious
VBA32	Binder.Celesty
ALYac	Dropped:Generic.Malware.Tk.532FC72E
TACHYON	Trojan/W32.HackTool.329216.B
Ad-Aware	Dropped:Generic.Malware.Tk.532FC72E
Malwarebytes	HackTool.Binder
ESET-NOD32	Win32/TrojanDropper.Binder.NBH
TrendMicro-HouseCall	TROJ_BINDER_FC1700C9.UVPA
Tencent	Malware.Win32.Gencirc.10b0a728
Yandex	HackTool.Binder!IMtdREcP3/k
Ikarus	Trojan.Win32.Dorv
eGambit	Trojan.Generic
Fortinet	W32/Dropper.NBH!tr
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.fc9a11
Panda	Trj/CI.A
MaxSecure	HackTool.W32.Binder.bs

How to remove Trojan:MSIL/Sdnldr.GG!MTB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan:MSIL/Sdnldr.GG!MTB”?