UDS:Trojan.MSIL.DiskWriter removal tips

The UDS:Trojan.MSIL.DiskWriter is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Trojan.MSIL.DiskWriter virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine UDS:Trojan.MSIL.DiskWriter?


File Info:
crc32: 411AC1B9
md5: 10b8d99752370f6eecaab178b8ee9c98
name: 10B8D99752370F6EECAAB178B8EE9C98.mlw
sha1: 741288b876b1c15209aa7f38378856c4faf401e9
sha256: 24aaf19d05052e70304909c55b850583dc106db8f334746724673beca9f85559
sha512: 80e765c190e7d0801a646427ae377b02ab22e414af269f08514b51fcc2ff46ae82f6c62708595ee660a3cf2cb2c0552e7f4d26099a558ecc9329509f8b1039cb
ssdeep: 384:JDkQxbcYArlEJ6GPpjKuokwlwAN9Qgt9tVISG/UOp9LEpfKjzk+f3ncDlu+6fp9:cY16GRk9Q9SG/jPQ0jYs3c9O2YckV1
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: OpenPls.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: OpenPls
ProductVersion: 1.0.0.0
FileDescription: OpenPls
OriginalFilename: OpenPls.exe

UDS:Trojan.MSIL.DiskWriter also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
APEX	Malicious
Kaspersky	UDS:Trojan.MSIL.DiskWriter.gen
BitDefenderTheta	Gen:NN.ZemsilF.34738.bm0@aOlxUbo
TrendMicro	Ransom.MSIL.CRYPTOLOCKER.SM.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.nh
eGambit	Unsafe.AI_Score_99%
McAfee	Artemis!10B8D9975237
TrendMicro-HouseCall	Ransom.MSIL.CRYPTOLOCKER.SM.hp
Ikarus	PUA.MSIL.Dllinject
MaxSecure	Trojan.Malware.300983.susgen

How to remove UDS:Trojan.MSIL.DiskWriter?

UDS:Trojan.MSIL.DiskWriter removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X