Trojan:MSIL/Wizrem information

The Trojan:MSIL/Wizrem is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/Wizrem virus can do?

• A file was accessed within the Public folder.
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded win api malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:MSIL/Wizrem?

File Info:
name: 07D0F21D79F6A2A5478E.mlw
path: /opt/CAPEv2/storage/binaries/c20ed619906f2b6f6286503487596059edadc9612a8b5774805e2867fbc26da5
crc32: 26616EA3
md5: 07d0f21d79f6a2a5478e89be0e497c4f
sha1: b57391a3fb5562666de5e89b46de22067db58dad
sha256: c20ed619906f2b6f6286503487596059edadc9612a8b5774805e2867fbc26da5
sha512: 9da6b4353d4ce0b8954d008a63eb64e03a929ab372eb4a5346be0f874609750eb54ca75248dfe89200445ef4fd19cfc1a78cb65cbbce7740a2f4bc1b9d2a2522
ssdeep: 1536:+5dzicrulUa5xApP6wPo1Znfp3GMC+3kKcl:6dzicr4UyrB1fMMC+3rY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12933AF089B96E794E53B457398FB0A7CFA206B83D0C21D6439FC631F3FE12159297169
sha3_384: cd713790d8e5915a15e092f5cf25ea7aaeb83a1ddd0fa0001253a00333c6752b3467861e37e8f41e53a6f6c828774336
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-05-26 05:56:59

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: F%2Y6P
FileDescription: F
FileVersion: 5.6.1.7
InternalName: PodolskyFUU.exe
LegalCopyright: Copyright © 5247
LegalTrademarks: 
OriginalFilename: PodolskyFUU.exe
ProductName: F%2Y6P6L0
ProductVersion: 5.6.1.7
Assembly Version: 8.3.6.8

Trojan:MSIL/Wizrem also known as:

How to remove Trojan:MSIL/Wizrem?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.