VirTool:MSIL/Injector.GL information

The VirTool:MSIL/Injector.GL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:MSIL/Injector.GL virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Injection with CreateRemoteThread in a remote process
Creates RWX memory
A process attempted to delay the analysis task.
Starts servers listening on 127.0.0.1:0
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Looks up the external IP address
Executed a process and injected code into it, probably while unpacking
Exhibits behavior characteristics of HawkEye keylogger.
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients
Collects information to fingerprint the system
Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

z.whorecord.xyz

a.tomx.xyz

whatismyipaddress.com

How to determine VirTool:MSIL/Injector.GL?


File Info:
crc32: B9D05119
md5: 88fd4cf81a72a7a8642b4e248626bd28
name: 88FD4CF81A72A7A8642B4E248626BD28.mlw
sha1: 10f58d151e0ce590c27d2a9c33a2c5f8fdbf518b
sha256: 6bad2fb94eb774403450fc90c697e457c2d260eb0b20a96f15ee82cef6f74d86
sha512: 143f486ee43ae26d1b6cffd5c3269334e8454e1642caac84f38abdaf1e41f6804a3cdb2f0ad925a83554d5b166b75f681321e800a76ecea06e61dc414f142037
ssdeep: 12288:g65g0U7KeWP0inCfP1nUi7OZgS+zxkVmLbn/iIXE58oRmvPpE3/:j5g0UiP70PpPqM3nNK8oGPpE3
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Cremosso, Inc.
FileVersion: 3.8.8.0
CompanyName: Cremosso, Inc.
ProductName: cremosso
ProductVersion: 3.8.8.0
FileDescription: cremosso
OriginalFilename: cremosso.exe
Translation: 0x0409 0x04b0

VirTool:MSIL/Injector.GL also known as:

Bkav	W32.Clodeba.Trojan.8164
MicroWorld-eScan	Trojan.GenericKDZ.30112
nProtect	Trojan.GenericKDZ.30112
CAT-QuickHeal	TrojanAPT.KeyBase.ST3
ALYac	Trojan.GenericKDZ.30112
Malwarebytes	Trojan.Agent.MSIL
Zillya	Trojan.Inject.Win32.177877
K7AntiVirus	Trojan ( 004ce2001 )
K7GW	Trojan ( 004ce2001 )
TheHacker	Trojan/Generic.lrd
Baidu	MSIL.Trojan.Injector.ci
NANO-Antivirus	Trojan.Win32.Inject.dvwzir
Cyren	W32/Trojan.YQWJ-6777
Symantec	Trojan.Gen
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKDZ.30112
Agnitum	Trojan.Inject!w/dXGrYh7/M
ViRobot	Trojan.Win32.Z.Kazy.715264.C[h]
Tencent	Win32.Trojan.Generic.Eehx
Ad-Aware	Trojan.GenericKDZ.30112
Sophos	Mal/MSIL-OM
Comodo	UnclassifiedMalware
F-Secure	Trojan.GenericKDZ.30112
DrWeb	Trojan.Packed.32643
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R00XC0RI315
McAfee-GW-Edition	Trojan-FGVZ!88FD4CF81A72
Emsisoft	Trojan.GenericKDZ.30112 (B)
ESET-NOD32	a variant of MSIL/Injector.LRD
Avira	TR/Injector.715264.6
Antiy-AVL	Trojan[:HEUR]/Win32.AGeneric
Microsoft	VirTool:MSIL/Injector.GL
Jiangmin	Trojan/MSIL.gjxm
Arcabit	Trojan.A
AegisLab	Troj.MSIL.Inject.cpvr!c
GData	Trojan.GenericKDZ.30112
AhnLab-V3	Trojan/Win32.MSIL
McAfee	Trojan-FGVZ!88FD4CF81A72
AVware	Trojan.Win32.Generic!BT
Panda	Trj/CI.A
Rising	MSIL:Malware.Generic(Thunder)!1.A1C4 [F]
Ikarus	Trojan.MSIL.Injector
Fortinet	MSIL/Injector.LRD!tr
AVG	MSIL8.CFCP
Baidu-International	Trojan.MSIL.Inject.cpvr
Qihoo-360	HEUR/QVM03.0.Malware.Gen

How to remove VirTool:MSIL/Injector.GL?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

VirTool:MSIL/Injector.GL information